CVE-2022-45802
Apache StreamPark (incubating): Upload any file to any directory
Summary
Apache StreamPark (incubating): Upload any file to any directory
Original description
The description as published by the source.
Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded file type, causing users to upload some high-risk files, and may upload them to any directory, Users of the affected versions should upgrade to Apache StreamPark 2.0.0 or later
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov