Allocation of Resources Without Limits or Throttling

Overview org.apache.storm:storm-server is a distributed realtime computation system. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the DRPC process. An attacker can cause unbounded memory consumption by sending numerous unique functio...

Incorrect Authorization

Overview org.apache.storm:storm-server is a distributed realtime computation system. Affected versions of this package are vulnerable to Incorrect Authorization due to insufficient validation of topology.blobstore.map during the rebalance process. An attacker can gain unauthorized access to...