Not rated
CVE-2025-30001 Incorrect Execution-Assigned Permissions vulnerability in Apache StreamPark
Description
Incorrect Execution-Assigned Permissions vulnerability in Apache StreamPark. This issue affects Apache StreamPark: from 2.1.4 before 2.1.6. Users are recommended to upgrade to version 2.1.6, which fixes the issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache StreamPark 2.1 | 2.1.4 → < 2.1.6 | 2.1.6 |
References
- lists.apache.org lists.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache StreamPark
The 9 CVEs of Apache StreamPark →
CVE-2025-53960
When issuing JSON Web Tokens (JWT), Apache StreamPark directly uses the user's password as the HMAC signing key (e.g.,…
Not rated
CVE-2025-54947
In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists
Not rated
CVE-2025-54981
Weak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for…
Not rated
CVE-2024-48988
SQL Injection vulnerability in Apache StreamPark
Not rated