Product · Apache Software Foundation

Apache SeaTunnel Web

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.1

CVE-2023-48396

Apache SeaTunnel Web: Authentication bypass

Web Authentication vulnerability in Apache SeaTunnel. Since the jwt key is hardcoded in the application, an attacker can forge any token to log in any user. Attacker can get secret key in /seatunnel-server/seatunnel-app/src/main/resources/application.yml and …

Apache Software Foundation Apache SeaTunnel Web org.apache.seatunnel:seatunnel-web Maven

Jul 30, 2024