CVE-2024-29178 — Apache StreamPark: FreeMarker SSTI RCE Vulnerability
On versions before 2.1.4, a user could log in and perform a template injection attack resulting in Remote Code Execution on the server, The attacker must successfully log into t…
Published: 2024-07-18 · CVSS: 8.8 · CVSS 3.1
On versions before 2.1.4, a user could log in and perform a template injection attack resulting in Remote Code Execution on the server, The attacker must successfully log into the system to launch an attack, so this is a moderate-impact vulnerability. Mitigation: all users should upgrade to 2.1.4
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7