Package · Maven

org.apache.streampark:streampark-common_2.12

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.8

CVE-2022-45802

Apache StreamPark (incubating): Upload any file to any directory

Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded file type, causing users to upload some high-risk files, and may upload them to any directory, Users of the affected versions should upgrade to …

Apache Software Foundation Apache StreamPark (incubating) org.apache.streampark:streampark-common_2.11 org.apache.streampark:streampark-common_2.12 Maven

May 1, 2023