Executive brief
Apache StreamPark: Unchecked maven build params could trigger remote command execution
Affected products
- Maven org.apache.streampark:streampark
Junglewise Threat Intelligence
CVE-2023-52291: Apache StreamPark: Unchecked maven build params could trigger remote command execution
CVE-2023-52291 · Severity: low · CVSS 3.1 · Published 2024-07-17
Technologies: org.apache.streampark:streampark (Maven). Vendors: Maven.
Related threats
- Apache StreamPark: Use the user’s password as the secret key Vulnerability
- Apache StreamPark uses a Weak Encryption Algorithm
- Apache StreamPark has a hard-coded encryption key
- Apache StreamPark contains an Incorrect Execution-Assigned Permissions vulnerability
- Apache StreamPark: FreeMarker SSTI RCE Vulnerability