[<prev] [next>] [day] [month] [year] [list]
Message-ID: <f3d67560-300e-67a5-f2c2-8a9ff9dd5486@apache.org>
Date: Mon, 03 Mar 2025 10:34:02 +0000
From: Philipp Zehnder <zehnder@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2024-24778: Apache StreamPipes: Resources Permission
Escalation
Severity: important
Affected versions:
- Apache StreamPipes through 0.95.1
Description:
Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know.
This issue affects Apache StreamPipes: through 0.95.1.
Users are recommended to upgrade to version 0.97.0 which fixes the issue.
References:
https://streampipes.apache.org
https://www.cve.org/CVERecord?id=CVE-2024-24778
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
