CVE-2025-30001

HIGH

7.3

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-10-10

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

Incorrect Execution-Assigned Permissions vulnerability in Apache StreamPark. This issue affects Apache StreamPark: from 2.1.4 before 2.1.6. Users are recommended to upgrade to version 2.1.6, which fixes the issue.

Affected Platforms (CPE)

📦

Apache

Streampark

>= 2.1.4 and < 2.1.6

References & Advisories

🔗 https://lists.apache.org/thread/xfmsvhkcnr1831n0w5ovy3p44lsmfb7m

🔗 http://www.openwall.com/lists/oss-security/2025/09/04/1

関連する脆弱性情報

CVE-2025-539605.9

When issuing JSON Web Tokens (JWT), Apache StreamPark directly uses the user's password as the HMAC signing key (e.g., with the HS...

CVE-2025-549817.5

Weak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for encrypting se...

CVE-2025-549479.8

In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists. This vul...

CVE-2024-489887.6

SQL Injection vulnerability in Apache StreamPark. This issue affects Apache StreamPark: from 2.1.4 before 2.1.6. Users are recom...