Beveiligingsadvies

CVE-2022-42468

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-10-26 00:00:00

Laatst bijgewerkt 2025-05-07 13:53:00

Toegewezen door apache

CVSS-score 9.8

Status PUBLISHED

Beschrijving

Apache Flume versions 1.4.0 through 1.10.1 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with an unsafe providerURL. This issue is fixed by limiting JNDI to allow only the use of the java protocol or no protocol.

← Alle CVE's bekijken Bekijk op cve.org ↗