Apache Streampark vulnerabilities

• apache streampark Apache StreamPark: Uses the user’s password as the secret key CVE-2025-53960 Fix available 5.9 MediumDecember 12, 2025
• apache streampark Apache StreamPark: Use hard-coded key vulnerability CVE-2025-54947 Fix available 9.8 CriticalDecember 12, 2025
• apache streampark Apache StreamPark: Weak Encryption Algorithm in StreamPark CVE-2025-54981 Fix available 7.5 HighDecember 12, 2025
• apache streampark Apache StreamPark: Authenticated users can trigger remote command execution CVE-2025-30001 7.3 HighOctober 10, 2025
• apache streampark Apache StreamPark: SQL injection vulnerability CVE-2024-48988 7.6 HighAugust 22, 2025
• apache streampark Apache StreamPark: session not invalidated after logout CVE-2024-29070 9.1 CriticalJuly 23, 2024
• apache streampark Apache StreamPark IDOR Vulnerability CVE-2024-34457 6.5 MediumJuly 22, 2024
• apache streampark Apache StreamPark: FreeMarker SSTI RCE Vulnerability CVE-2024-29178 Fix available 8.8 HighJuly 18, 2024
• apache streampark Apache StreamPark: Information leakage vulnerability CVE-2024-29120 Fix available 5.9 MediumJuly 17, 2024
• apache streampark, apache software foundation streampark (incubating) +1 more Apache StreamPark (incubating): maven build params could trigger remote command execution CVE-2024-29737 Fix available 4.7 MediumJuly 17, 2024
• apache streampark, apache software foundation streampark (incubating) +1 more Apache StreamPark (incubating): Unchecked maven build params could trigger remote command execution CVE-2023-52291 Fix available 4.7 MediumJuly 17, 2024
• apache streampark, apache software foundation streampark (incubating) +1 more Apache StreamPark (incubating): Unchecked SQL query fields trigger SQL injection vulnerability CVE-2023-52290 8.1 HighJuly 16, 2024
• apache streampark, apache software foundation streampark (incubating) +1 more Apache StreamPark (incubating): Authenticated system users could trigger SQL injection vulnerability CVE-2023-30867 Fix available 4.9 MediumDecember 15, 2023
• apache streampark, apache software foundation streampark (incubating) +1 more Apache StreamPark (incubating): Authenticated system users could trigger remote command execution CVE-2023-49898 Fix available 7.2 HighDecember 15, 2023
• apache streampark, apache software foundation streampark (incubating) +1 more Apache StreamPark (incubating): Logic error causing any account reset CVE-2022-46365 Fix available 9.1 CriticalMay 1, 2023
• apache streampark, apache software foundation streampark (incubating) +1 more Apache StreamPark (incubating): LDAP Injection Vulnerability CVE-2022-45801 Fix available 5.4 MediumMay 1, 2023
• apache streampark, apache software foundation streampark (incubating) +1 more Apache StreamPark (incubating): Upload any file to any directory CVE-2022-45802 Fix available 9.8 CriticalMay 1, 2023