p PatchFirst

CVE-2024-24778

CVE-2024-24778 · Apache StreamPipes: Resources Permission Escalation

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know. This issue affects Apache StreamPipes: through 0.95.1. Users are recommended to upgrade to version 0.97.0 which fixes the issue.

CVSS 6.5 · Medium · EPSS 0.7% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • apache streampipes

    Versions
    • ≥ 0, ≤ 0.95.1: Affected (maven)

    No fix published

  • org.apache.streampipes:streampipes-parent Maven

    Versions
    • 0.66.0
    • 0.67.0
    • 0.68.0
    • 0.69.0
    • 0.70.0
    • 0.90.0
    • 0.91.0
    • 0.92.0
    • 0.93.0
    • 0.95.0
    • 0.95.1
    Affected ranges
    • ECOSYSTEM: < 0.97.0

    Update to 0.97.0

  • streampipes PyPI

    Versions
    • 0.0.2.dev0
    • 0.91.0
    • 0.92.0
    • 0.93.0
    • 0.95.0
    Affected ranges
    • ECOSYSTEM: < 0.97.0

    Update to 0.97.0

Original sources

Check your server →