CVE-2022-45802
Apache StreamPark (incubating): Upload any file to any directory
Résumé
Apache StreamPark (incubating): Upload any file to any directory
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded file type, causing users to upload some high-risk files, and may upload them to any directory, Users of the affected versions should upgrade to Apache StreamPark 2.0.0 or later
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov