CVE-2024-31411
CVE-2024-31411 · Apache StreamPipes: Potential remote code execution (RCE) via file upload
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Unrestricted Upload of File with dangerous type vulnerability in Apache StreamPipes. Such a dangerous type might be an executable file that may lead to a remote code execution (RCE). The unrestricted upload is only possible for authenticated and authorized users. This issue affects Apache StreamPipes: through 0.93.0. Users are recommended to upgrade to version 0.95.0, which fixes the issue.
CVSS 6.0 · Medium · EPSS 1.1% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
apache streampipes
- Versions
- ≥ 0, ≤ 0.93.0: Affected (maven)
No fix published
org.apache.streampipes:streampipes-parent Maven
- Versions
- 0.66.0
- 0.67.0
- 0.68.0
- 0.69.0
- 0.70.0
- 0.90.0
- 0.91.0
- 0.92.0
- 0.93.0
- Affected ranges
- ECOSYSTEM: < 0.95.0
Update to 0.95.0
streampipes PyPI
- Versions
- 0.0.2.dev0
- 0.91.0
- 0.92.0
- 0.93.0
- Affected ranges
- ECOSYSTEM: < 0.95.0
Update to 0.95.0