Security Advisory

CVE-2022-45802

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-05-01 14:04:57

Last updated 2024-10-21 15:10:45

Assigner apache

CVSS score not scored

State PUBLISHED

Description

Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded file type, causing users to upload some high-risk files, and may upload them to any directory, Users of the affected versions should upgrade to Apache StreamPark 2.0.0 or later

← Browse all CVEs View on cve.org ↗