Lucene search
ApacheVULNRICHMENT:CVE-2024-34457HistoryJul 22, 2024 - 9:48 a.m.
CVE-2024-34457 Apache StreamPark IDOR Vulnerability
2024-07-2209:48:23
CWE-639
apache
github.com
1
cve-2024
apache streampark
idor vulnerability
authorization token
user flink information
executesql
config
mitigation
upgrade.
On versions before 2.1.4, after a regular user successfully logs in, they can manually make a request using the authorization token to view everyone’s user flink information, including executeSQL and config.
Mitigation:
all users should upgrade to 2.1.4
Related
cve
cve
CVE-2024-34457
2024-07-22 10:15:03
osv
osv
CVE-2024-34457
2024-07-22 10:15:03
nvd
nvd
CVE-2024-34457
2024-07-22 10:15:03
cvelist
cvelist
CVE-2024-34457 Apache StreamPark IDOR Vulnerability
2024-07-22 09:48:23
veracode
veracode
Insecure Direct Object Reference (IDOR)
2024-07-23 06:29:02
EPSS
0.001
Percentile
29.2%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-34457