CVE-2025-30065
Apache Parquet Java: Arbitrary code execution in the parquet-avro module when reading an Avro schema from a Parquet file metadata
概要
Apache Parquet Java: Arbitrary code execution in the parquet-avro module when reading an Avro schema from a Parquet file metadata
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code
Users are recommended to upgrade to version 1.15.1, which fixes the issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- patch github.com
- report github.com
- report github.com
- web openwall.com
- web access.redhat.com
- web news.ycombinator.com
- web bleepingcomputer.com