CVE-2024-31411

Published: Jul 17, 2024Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Unrestricted Upload of File with dangerous type vulnerability in Apache StreamPipes. Such a dangerous type might be an executable file that may lead to a remote code execution (RCE). The unrestricted upload is only possible for authenticated and authorized users. This issue affects Apache StreamPipes: through 0.93.0. Users are recommended to upgrade to version 0.95.0, which fixes the issue.

Affected (1)

Products: Apache: Streampipes

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache Streampipes	Before 0.95.0

Related CWEs

Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (3)

https://lists.apache.org/thread/b0657okbwzg5xxs11hphvc9qrd9s70mt

Source: security@apache.org

Mailing ListVendor Advisory

http://www.openwall.com/lists/oss-security/2024/07/16/10

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread/b0657okbwzg5xxs11hphvc9qrd9s70mt

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListVendor Advisory

Timeline

No history available yet.