Apache StreamPipes

3 results · Clear filters · Feed

• High 8.1
  CVE-2025-47411 EPSS 15%

  Apache StreamPipes: Leverage of User ID for Privilege Escalation

  A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apache StreamPipes that allows them to swap the username of an existing user with that of an administrator.  This vulnerability allows an attac…

  Apache Software Foundation Apache StreamPipes org.apache.streampipes:streampipes-parent Maven
  Jan 1, 2026
• High 7.5
  CVE-2024-31979

  Apache StreamPipes: Possibility of SSRF in pipeline element installation process

  Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements. Previously, StreamPipes allowed users to configure custom endpoints from which to install additional pipeline elements. These endpoints we…

  Apache Software Foundation Apache StreamPipes org.apache.streampipes:streampipes-parent streampipes Maven PyPI
  Jul 17, 2024
• High 8.8
  CVE-2023-31469

  Apache StreamPipes: Privilege escalation through non-admin user

  A REST interface in Apache StreamPipes (versions 0.69.0 to 0.91.0) was not properly restricted to admin-only access. This allowed a non-admin user with valid login credentials to elevate privileges beyond the initially assigned roles. The issue is resolved by…

  Apache Software Foundation Apache StreamPipes org.apache.streampipes:streampipes-parent Maven
  Jun 23, 2023