| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.streampipes:streampipes-parent | ≥ 0.69.0, < 0.92.0 | 0.92.0 |
| streampipes | ≥ 0.69.0, ≤ 0.91.0 |
A REST interface in Apache StreamPipes (versions 0.69.0 to 0.91.0) was not properly restricted to admin-only access. This allowed a non-admin user with valid login credentials to elevate privileges beyond the initially assigned roles. The issue is resolved by upgrading to StreamPipes 0.92.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free