CVE-2024-31411
CVE-2024-31411 · Apache StreamPipes: Potential remote code execution (RCE) via file upload
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Unrestricted Upload of File with dangerous type vulnerability in Apache StreamPipes. Such a dangerous type might be an executable file that may lead to a remote code execution (RCE). The unrestricted upload is only possible for authenticated and authorized users. This issue affects Apache StreamPipes: through 0.93.0. Users are recommended to upgrade to version 0.95.0, which fixes the issue.
CVSS 6.0 · Media · EPSS 1,1% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: python
Productos y versiones afectados
apache streampipes
- Versiones
- ≥ 0, ≤ 0.93.0: Afectada (maven)
Sin corrección publicada
org.apache.streampipes:streampipes-parent Maven
- Versiones
- 0.66.0
- 0.67.0
- 0.68.0
- 0.69.0
- 0.70.0
- 0.90.0
- 0.91.0
- 0.92.0
- 0.93.0
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.95.0
Actualiza a 0.95.0
streampipes PyPI
- Versiones
- 0.0.2.dev0
- 0.91.0
- 0.92.0
- 0.93.0
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.95.0
Actualiza a 0.95.0