Executive brief
Apache StreamPark: Authenticated system users could trigger remote command execution
Affected products
- Maven org.apache.streampark:streampark
Junglewise Threat Intelligence
CVE-2023-49898: Apache StreamPark: Authenticated system users could trigger remote command execution
CVE-2023-49898 · Severity: info · Published 2023-12-15
Technologies: org.apache.streampark:streampark (Maven). Vendors: Maven.
Related threats
- Apache StreamPark: Use the user’s password as the secret key Vulnerability
- Apache StreamPark uses a Weak Encryption Algorithm
- Apache StreamPark has a hard-coded encryption key
- Apache StreamPark contains an Incorrect Execution-Assigned Permissions vulnerability
- Apache StreamPark: FreeMarker SSTI RCE Vulnerability