https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T23:34:28.589644+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-29120 CVE-2024-29120 — Apache StreamPark: Information leakage vulnerability 2026-10-07T23:34:28.590798+00:00

Affected: Apache Software Foundation Apache StreamPark

In Streampark (version < 2.1.4), when a user logged in successfully, the Backend service would return "Authorization" as the front-end authentication credential. User can use this credential to request other users' information, including the administrator's username, password, salt value, etc.

Mitigation:

all users should upgrade to 2.1.4