Vulnerabilities > CVE-2024-29178 - Unspecified vulnerability in Apache Streampark
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
On versions before 2.1.4, a user could log in and perform a template injection attack resulting in Remote Code Execution on the server, The attacker must successfully log into the system to launch an attack, so this is a moderate-impact vulnerability. Mitigation: all users should upgrade to 2.1.4
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 31 |