CVE-2022-45802
01.05.2023, 15:15
Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded file type, causing users to upload some high-risk files, and may upload them to any directory, Users of the affected versions should upgrade to Apache StreamPark 2.0.0 or laterEnginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | streampark | 𝑥 < 2.0.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| apache | streampark | 𝑥 < 2.0.0 | ADP |
Common Weakness Enumeration