Non évaluée
Apache StreamPark: FreeMarker SSTI RCE Vulnerability
CVE-2024-29178
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
On versions before 2.1.4, a user could log in and perform a template injection attack resulting in Remote Code Execution on the server, The attacker must successfully log into the system to launch an attack, so this is a moderate-impact vulnerability.
Mitigation:
all users should upgrade to 2.1.4
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com