Apache Cassandra 安全漏洞

Apache Cassandra is a distributed Nosql database from the Apache USA Foundation. A security vulnerability exists in Apache Cassandra that originates from the fact that a user with MODIFY privileges and a privilege range of ON ALL KEYSPACES can elevate privileges to superuser in the target Cassand...

Apache Cassandra 安全漏洞

Apache Cassandra is a distributed Nosql database from the Apache USA Foundation. A security vulnerability exists in Apache Cassandra that originates from a vulnerability that allows a local attacker to perform a man-in-the-middle attack by manipulating the RMI registry to capture usernames and...

PT-2025-5589 · Apache · Apache Cassandra

Name of the Vulnerable Software and Affected Versions: Apache Cassandra versions 4.0.0 through 4.0.15 Apache Cassandra versions 4.1.0 through 4.1.7 Apache Cassandra versions 5.0.0 through 5.0.2 Description: The issue allows users to access a datacenter or IP/CIDR groups they should not be able to...

PT-2025-4767 · Apache · Apache Cassandra

Name of the Vulnerable Software and Affected Versions: Apache Cassandra versions 3.0.30, 3.11.17, 4.0.15, 4.1.7, 5.0.2 Description: A privilege escalation issue exists in Apache Cassandra, where a user with MODIFY permission on all keyspaces can escalate privileges to superuser within a targeted...

GHSA-6V67-2WR5-GVF4 vulnerabilities

Vulnerabilities for packages: akhq, sonarqube-10, management-api-for-apache-cassandra-4.0, sonarqube, zookeeper-fips, apache-nifi, management-api-for-apache-cassandra-5.0, thingsboard, cassandra, kserve-modelmesh, ontop-fips, cassandra-reaper, sonar-scanner-cli,...

GHSA-PR98-23F8-JWXV vulnerabilities

Vulnerabilities for packages: akhq, sonarqube-10, management-api-for-apache-cassandra-4.0, sonarqube, zookeeper-fips, apache-nifi, management-api-for-apache-cassandra-5.0, thingsboard, cassandra, kserve-modelmesh, ontop-fips, cassandra-reaper, sonar-scanner-cli,...

CVE-2024-12801 vulnerabilities

Vulnerabilities for packages: akhq, sonarqube-10, management-api-for-apache-cassandra-4.0, sonarqube, zookeeper-fips, apache-nifi, management-api-for-apache-cassandra-5.0, thingsboard, cassandra, kserve-modelmesh, ontop-fips, cassandra-reaper, sonar-scanner-cli,...

CVE-2024-12798 vulnerabilities

Vulnerabilities for packages: akhq, sonarqube-10, management-api-for-apache-cassandra-4.0, sonarqube, zookeeper-fips, apache-nifi, management-api-for-apache-cassandra-5.0, thingsboard, cassandra, kserve-modelmesh, ontop-fips, cassandra-reaper, sonar-scanner-cli,...

GHSA-RQC4-2HC7-8C8V vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, request-1276...

GHSA-RQC4-2HC7-8C8V vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

CVE-2024-53899 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, request-1276...

CVE-2024-53899 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-8495-4G3G-X7PR vulnerabilities

Vulnerabilities for packages: py3-aiohttp, py3-cassandra-medusa, request-1276, airflow, kserve, awx, checkov, dask-gateway, py3.13-scanner-test-libraries-aiohttp...

GHSA-XQ3W-V528-46RV vulnerabilities

Vulnerabilities for packages: apicurio-registry, sonarqube, keycloak...

CVE-2024-47535 vulnerabilities

Vulnerabilities for packages: apicurio-registry, sonarqube, keycloak...

GHSA-G8M5-722R-8WHQ vulnerabilities

Vulnerabilities for packages: kafka, cassandra-reaper, spark, zookeeper-fips, apache-nifi, druid, strimzi-kafka-operator, confluent-kafka-jre-bcfips, spark-fips, confluent-kafka, zookeeper, apache-tika, celeborn, cloudwatch-exporter, solr...

CVE-2024-8184 vulnerabilities

Vulnerabilities for packages: kafka, cassandra-reaper, spark, zookeeper-fips, apache-nifi, druid, strimzi-kafka-operator, confluent-kafka-jre-bcfips, spark-fips, confluent-kafka, zookeeper, apache-tika, celeborn, cloudwatch-exporter, solr...

GHSA-J26W-F9RQ-MR2Q vulnerabilities

Vulnerabilities for packages: cassandra-reaper, apache-hop, spark-fips, apache-hop-fips, spark...

CVE-2024-9823 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, apache-hop, spark-fips, apache-hop-fips, spark...

Cassandra Web File Read

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cassandra Web File Read Vulnerability', 'Description' = %q This module exploits an unauthenticated directory traversal vulnerability in Cassandra...