Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vm7w-2724-5m23

Опубликовано: 03 мар. 2025
Источник: github
Github: Прошло ревью
CVSS3: 6.5

Описание

Apache StreamPipes has improper privilege management in a REST interface

Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was known.

This issue affects Apache StreamPipes: through 0.95.1.

Users are recommended to upgrade to version 0.97.0 which fixes the issue.

Пакеты

Наименование

org.apache.streampipes:streampipes-parent

maven
Затронутые версииВерсия исправления

< 0.97.0

0.97.0

Наименование

streampipes

pip
Затронутые версииВерсия исправления

< 0.97.0

0.97.0

EPSS

Процентиль: 35%
0.00145
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 6.5
nvd
11 месяцев назад

Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know. This issue affects Apache StreamPipes: through 0.95.1. Users are recommended to upgrade to version 0.97.0 which fixes the issue.

EPSS

Процентиль: 35%
0.00145
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-269