Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33992
HistoryFeb 03, 2022 - 11:03 a.m.

Improper Input Validation

2022-02-0311:03:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
improper input validation
apache pulsar
access restrictions
persistent topics base
security bypass
ledger read
software

EPSS

0.002

Percentile

57.2%

org.apache.pulsar, pulsar is vulnerable to improper input validation. The vulnerability exists due to improper access restrictions in internalResetCursorOnPosition function in PersistentTopicsBase.javafile which allows an attacker to bypass security and read the ledger.

EPSS

0.002

Percentile

57.2%