Lucene search
Veracode Vulnerability DatabaseVERACODE:48123HistoryJul 19, 2024 - 4:53 a.m.
Template Injection
2024-07-1904:53:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
apache streampark
template injection
input validation
arbitrary code
server security
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.9
Confidence
Low
EPSS
0.002
Percentile
57.1%
Apache StreamPark is vulnerable to template injection. The vulnerability is due to insufficient input validation that allows attacker to perform a template injection that potentially leads to execution of arbitrary code on server.
Related
cve
cve
CVE-2024-29178
2024-07-18 12:15:02
nvd
nvd
CVE-2024-29178
2024-07-18 12:15:02
osv
osv
CVE-2024-29178
2024-07-18 12:15:02
cvelist
cvelist
CVE-2024-29178 Apache StreamPark: FreeMarker SSTI RCE Vulnerability
2024-07-18 11:15:56
vulnrichment
vulnrichment
CVE-2024-29178 Apache StreamPark: FreeMarker SSTI RCE Vulnerability
2024-07-18 11:15:56
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.9
Confidence
Low
EPSS
0.002
Percentile
57.1%
Related for VERACODE:48123