Apache StreamPark contains an Incorrect Execution-Assigned Permissions vulnerability

ALTO 7.3CVE-2025-30001 · GHSA-6wwv-6mm3-pp76 · Published 10/10/2025 · updated 08/10/2026

Em resumo

CVE-2025-30001 é uma vulnerabilidade ALTO (CVSS 7.3) que afeta org.apache.streampark:streampark, streampark (apache).
Chance de exploração nos próximos 30 dias (EPSS): 0.55%, maior que 46.3% das vulnerabilidades.
Correção: atualize para 2.1.6 ou posterior.

Package	Affected versions	Patched versions
org.apache.streampark:streampark Maven	`≤ 2.1.5`	No fix yet
streampark apache	`≥ 2.1.4, < 2.1.6`	`2.1.6`

Description

Incorrect Execution-Assigned Permissions vulnerability in Apache StreamPark. This issue affects Apache StreamPark: from 2.1.4 before 2.1.6. Users are recommended to upgrade to version 2.1.6, which fixes the issue. Version 2.1.6 has yet to be published in the Maven registry.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2025-30001 · ADVISORY
apache/streampark · PACKAGE
lists.apache.org/thread/xfmsvhkcnr1831n0w5ovy3p44lsmfb7m · WEB
openwall.com/lists/oss-security/2025/09/04/1 · WEB

Mais vulnerabilidades de org.apache.streampark:streampark

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.apache.streampark:streampark

Maven

≤ 2.1.5

No fix yet

streampark

apache

≥ 2.1.4, < 2.1.6

2.1.6

Description

NVD description

Mais vulnerabilidades de org.apache.streampark:streampark

Ver tudo →