Lucene search
ApacheCVELIST:CVE-2024-30471HistoryJul 17, 2024 - 9:01 a.m.
CVE-2024-30471 Apache StreamPipes: Potential creation of multiple identical accounts
2024-07-1709:01:52
CWE-367
apache
www.cve.org
3
cve-2024-30471
apache streampipes
toctou race condition
user self-registration
account creation
email address
user management
upgrade
version 0.95.0
EPSS
0
Percentile
10.7%
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration.
This allows an attacker to potentially request the creation of multiple accounts with the same email address until the email address is registered, creating many identical users and corrupting StreamPipe’s user management.
This issue affects Apache StreamPipes: through 0.93.0.
Users are recommended to upgrade to version 0.95.0, which fixes the issue.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Apache StreamPipes",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThanOrEqual": "0.93.0",
"status": "affected",
"version": "0",
"versionType": "maven"
}
]
}
]Related
vulnrichment
vulnrichment
osv
osv
CVE-2024-30471
2024-07-17 09:15:02
veracode
veracode
Time-of-check Time-of-use (TOCTOU) Race Condition
2024-07-18 08:55:19
nvd
nvd
CVE-2024-30471
2024-07-17 09:15:02
cve
cve
CVE-2024-30471
2024-07-17 09:15:02
github
github