Critical · 9.8 CVE-2015-3188 EUVD-2022-3571GHSA-cg5h-q983-4rww

Apache Storm remote code execution vulnerability

Published Jan 13, 2017 · Updated Aug 6, 2024 · Assigned by redhat

Description

The UI daemon in Apache Storm 0.10.0 before 0.10.0-beta1 allows remote attackers to execute arbitrary code via unspecified vectors.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.apache.storm:storm	>= 0.10.0-beta, < 0.10.0-beta1	0.10.0-beta1	GHSA-cg5h-q983-4rww