← All credits
L0ne1y
22 vulnerability records and advisories credit this contributor.
CVE-2024-36265
Apache Submarine Server Core: authorization bypass
CVE-2024-45537
Apache Druid: Users can provide MySQL JDBC properties not on allow list
CVE-2024-43441
Apache HugeGraph-Server: Fixed JWT Token(Secret)
CVE-2024-43166
Incorrect Default Permissions vulnerability in Apache DolphinScheduler.
This issue affects Apache DolphinScheduler: before 3.2.2.
Users are recommended to upgrade to version 3.3.1, which fixes the issue.
CVE-2024-43115
Apache DolphinScheduler: Alert Script Attack
CVE-2024-36448
Apache IoTDB Workbench: SSRF Vulnerability (EOL)
CVE-2024-36264
Apache Submarine Commons Utils: default secret
CVE-2024-36263
Apache Submarine Server Core: SQL injection
CVE-2024-34457
Apache StreamPark IDOR Vulnerability
CVE-2024-31979
Apache StreamPipes: Possibility of SSRF in pipeline element installation process