Lucene search
+L

3 matches found

OSV
OSV
added 2024/07/17 9:30 a.m.12 views

GHSA-5V69-92VW-FMJH Apache StreamPark: maven build params could trigger remote command execution

In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in to the streampark system and...

4.7CVSS5.3AI score0.01117EPSS
SaveExploits0References4
OSV
OSV
added 2024/07/17 8:21 a.m.25 views

CVE-2024-29737 Apache StreamPark (incubating): maven build params could trigger remote command execution

In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in to the streampark system and...

8.8CVSS6AI score
SaveExploits0References4
Cvelist
Cvelist
added 2024/07/17 8:21 a.m.41 views

CVE-2024-29737 Apache StreamPark (incubating): maven build params could trigger remote command execution

In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in to the streampark system and...

0.01117EPSS
SaveExploits0References2
Rows per page
Query Builder