logo_clicknbuy.png

CVE-2024-48988 – Apache StreamPark SQL Injection

The following table lists the changes that have been made to the
CVE-2024-48988 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Aug. 22, 2025

    Action Type Old Value New Value
    Added Description SQL Injection vulnerability in Apache StreamPark.

    This issue affects Apache StreamPark: from 2.1.4 before 2.1.6.

    Users are recommended to upgrade to version 2.1.6, which fixes the issue.

    This vulnerability is present only in the distribution package (SpringBoot platform) and does not involve Maven artifacts.
    It can only be exploited after a user has successfully logged into the platform (implying that the attacker would first need to compromise the login authentication).
    As a result, the associated risk is considered relatively low.
    Added CWE CWE-564
    Added Reference https://lists.apache.org/thread/26ng8388l93zwjrst560cbjz9x7wpq1s
  • CVE Modified
    by 134c704f-9b21-4f2e-91b3-4a467353bcc0

    Aug. 22, 2025

    Action Type Old Value New Value
    Added CVSS V3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Share the Post:

Related Posts