CVE-2025-30065

CVE-2025-30065 研究笔记 此仓库刻意保持小巧且可读性高。它旨在用于对 Apache Parquet / Avro 模式处理中的 CVE-2025-30065 进行授权安全研究、本地验证和防御性研究。 本 README 侧重于仓库卫生、构建可复现性和安全使用。它不提供可操作的漏洞利用指导。 仓库内容 一个基于 Java 的研究框架。 一组用于在受控实验室中研究此漏洞的少量源文件。 一个 Maven 构建定义。 一个辅助脚本，用于在本地编译和运行项目。 前提条件 Java 8 或更新版本。 Maven。 一个您拥有或得到明确授权使用的受控测试环境。 构建和运行 chmod +x...

parquet-avro-rce

Este repositorio no tiene un README...

Security Bulletin: IBM SPSS Modeler is affected by an Apache Hive SSRF vulnerability that could allow authenticated users to trigger requests to attacker-controlled URLs

Summary IBM SPSS Modeler is affected by an Apache Hive SSRF vulnerability that could allow authenticated users to trigger requests to attacker-controlled URLs. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-55976 DESCRIPTION: Server-Side Request Forgery...

Improper Caching

Spring Cloud Stream is vulnerable to improper caching of the original content type. The vulnerability is due to the Avro handling component caching the original content type, where the cached value is reused for subsequent messages and an attacker can supply a crafted content type to cause...

CLEANSTART-2026-QP89146 Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas

Multiple security vulnerabilities affect the apache-hive package. Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. See references for individual vulnerability details...

CVE-2026-54048 Apache Impala: Avro Schema URL Server-Side Request Forgery

Specifying tblproperties'avro.schema.url'=' http://...' or with a 'file:///' URI on a table in Impala 2.0.0 to 4.5.1 on all platforms allows an attacker to trigger a GET request to internal endpoints they may not have access to but that Impala does and the response my be exposed via parsing error...

CVE-2026-54048 Apache Impala: Avro Schema URL Server-Side Request Forgery

Specifying tblproperties'avro.schema.url'=' http://...' or with a 'file:///' URI on a table in Impala 2.0.0 to 4.5.1 on all platforms allows an attacker to trigger a GET request to internal endpoints they may not have access to but that Impala does and the response my be exposed via parsing error...

PT-2026-88921

Specifying tblproperties'avro.schema.url'=' http://...' or with a 'file:///' URI on a table in Impala 2.0.0 to 4.5.1 on all platforms allows an attacker to trigger a GET request to internal endpoints they may not have access to but that Impala does and the response my be exposed via parsing error...

CVE-2026-59304

Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59304 Improper caching of the original content type in Spring Cloud Stream Avro

Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59304 Improper caching of the original content type in Spring Cloud Stream Avro

Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

EUVD-2026-67190

Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59304

Spring Cloud Stream Avro is affected by an improper caching of the original content type, leading to potential confidentiality and integrity impact at a low severity (CVSS 3.1). The affected versions are Spring Cloud Stream 5.0.0–5.0.2 , 4.3.0–4.3.3 , and 4.2.0–4.2.6 . The CVSS vector (AV:N/AC:H/...

PT-2026-82712

Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

Server-side Request Forgery (SSRF)

Overview org.apache.hive:hive-common is a reading, writing, and managing large datasets residing in distributed storage using SQL. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via Avro SerDe schema resolution in AvroSerdeUtils.determineSchemaOrThrowExceptio...

Server-side Request Forgery (SSRF)

Overview org.apache.hive:hive-exec is a package for reading, writing, and managing large datasets residing in distributed storage using SQL. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via Avro SerDe schema resolution in...

CVE-2026-55976

Server-Side Request Forgery SSRF in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive server to fetch an attacker-controlled URL when resolving the avro.schema.url table property on an Avro table that is...

CVE-2026-55976 Apache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url

Server-Side Request Forgery SSRF in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive server to fetch an attacker-controlled URL when resolving the avro.schema.url table property on an Avro table that is...

CVE-2026-55976 Apache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url

Server-Side Request Forgery SSRF in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive server to fetch an attacker-controlled URL when resolving the avro.schema.url table property on an Avro table that is...

CVE-2026-55976

Apache Hive versions before 4.2.1 are vulnerable to a Server-Side Request Forgery (SSRF) in the Avro SerDe schema resolution. Specifically, improper input validation of the avro.schema.url table property allows an authenticated remote attacker with CREATE TABLE privileges to force the Hive server...