Not rated
CVE-2022-45802 Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded…
Description
Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded file type, causing users to upload some high-risk files, and may upload them to any directory, Users of the affected versions should upgrade to Apache StreamPark 2.0.0 or later
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache StreamPark (incubating) 1.0 | 1.0.0 → < 2.0.0 | 2.0.0 |
| streampark 2.0 | earliest → < 2.0.0 | 2.0.0 |
References
- lists.apache.org lists.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache StreamPark (incubating)
The 8 CVEs of Apache StreamPark (incubating) →
CVE-2024-29737
In streampark, the project module integrates Maven's compilation capabilities
Not rated
CVE-2023-52291
In streampark, the project module integrates Maven's compilation capabilities
Not rated
CVE-2023-52290
In streampark-console the list pages(e.g: application pages), users can sort page by field
Not rated
CVE-2023-30867
In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based…
Not rated