CVE-2024-24778mediumCWE-269

CVE-2024-24778: fallo de gravedad media en Apache StreamPipes

Apache StreamPipes: Resources Permission Escalation

Publicada el

Seguir esta CVE+ Monitorear Apache StreamPipes+ Monitorear org.apache.streampipes:streampipes-parent

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.5epss 0.7%
Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know. This issue affects Apache StreamPipes: through 0.95.1. Users are recommended to upgrade to version 0.97.0 which fixes the issue.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Apache Software Foundation · Apache StreamPipes
CVEs relacionadas — Apache StreamPipes

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-47411HIGHApache StreamPipes: Leverage of User ID for Privilege EscalationEPSS 15.3%CVE-2024-29868CRITICALApache StreamPipes, Apache StreamPipes: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Recovery Token GenerationEPSS 6.0%CVE-2024-31411MEDIUMApache StreamPipes: Potential remote code execution (RCE) via file uploadEPSS 1.1%CVE-2023-31469HIGHApache StreamPipes: Privilege escalation through non-admin userEPSS 1.1%CVE-2024-31979HIGHApache StreamPipes: Possibility of SSRF in pipeline element installation processEPSS 0.7%CVE-2024-30471MEDIUMApache StreamPipes: Potential creation of multiple identical accountsEPSS 0.7%