Non notée
CVE-2022-45802 Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded…
Description
Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded file type, causing users to upload some high-risk files, and may upload them to any directory, Users of the affected versions should upgrade to Apache StreamPark 2.0.0 or later
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache StreamPark (incubating) 1.0 | 1.0.0 → < 2.0.0 | 2.0.0 |
| streampark 2.0 | premières → < 2.0.0 | 2.0.0 |
Autres CVE de Apache StreamPark (incubating)
Les 8 CVE de Apache StreamPark (incubating) →
CVE-2024-29737
In streampark, the project module integrates Maven's compilation capabilities
Non notée
CVE-2023-52291
In streampark, the project module integrates Maven's compilation capabilities
Non notée
CVE-2023-52290
In streampark-console the list pages(e.g: application pages), users can sort page by field
Non notée
CVE-2023-30867
In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based…
Non notée