← CVE Intelligence

CVE-2024-31411

Apache StreamPipes: Potential remote code execution (RCE) via file upload PUBLISHED

Description (CNA)

Unrestricted Upload of File with dangerous type vulnerability in Apache StreamPipes. Such a dangerous type might be an executable file that may lead to a remote code execution (RCE). The unrestricted upload is only possible for authenticated and authorized users. This issue affects Apache StreamPipes: through 0.93.0. Users are recommended to upgrade to version 0.95.0, which fixes the issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache StreamPipesaffected 0 through 0.93.0

CWE

CWE-434

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.