nvd-json-data-feeds/CVE-2024/CVE-2024-314xx/CVE-2024-31411.json

{
  "id": "CVE-2024-31411",
  "sourceIdentifier": "security@apache.org",
  "published": "2024-07-17T10:15:01.810",
  "lastModified": "2024-07-17T13:34:20.520",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unrestricted Upload of File with dangerous type vulnerability in Apache StreamPipes.\nSuch a dangerous type might be an executable file that may lead to a remote code execution (RCE).\nThe unrestricted upload is only possible for authenticated and authorized users.\nThis issue affects Apache StreamPipes: through 0.93.0.\n\nUsers are recommended to upgrade to version 0.95.0, which fixes the issue.\n\n"
    }
  ],
  "metrics": {},
  "weaknesses": [
    {
      "source": "security@apache.org",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-434"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://lists.apache.org/thread/b0657okbwzg5xxs11hphvc9qrd9s70mt",
      "source": "security@apache.org"
    }
  ]
}