https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 20:56:19 +0000 https://cve.radiocsirt.org/vuln/cnvd-2024-02174 cnvd-2024-02174 https://cve.radiocsirt.org/vuln/cnvd-2024-02174 https://cve.radiocsirt.org/vuln/euvd-2026-8470 EUVD-2026-8470 https://cve.radiocsirt.org/vuln/euvd-2026-8470 https://cve.radiocsirt.org/vuln/fkie_cve-2023-30867 <p>In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based fuzzy search, such as job names, role names, etc. The sql syntax :select * from table where jobName like &#39;%jobName%&#39;. However, the jobName field may receive illegal parameters, leading to SQL injection. This could potentially result in information leakage.</p> <p>Mitigation:</p> <p>Users are recommended to upgrade to version 2.1.2, which fixes the issue.</p> <p>In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based fuzzy search, such as job names, role names, etc. The sql syntax :select * from table where jobName like &#39;%jobName%&#39;. However, the jobName field may receive illegal parameters, leading to SQL injection. This could potentially result in information leakage.</p> <p>Mitigation:</p> <p>Users are recommended to upgrade to version 2.1.2, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-30867 https://cve.radiocsirt.org/vuln/ghsa-rrcg-jwr5-32g7 <p><strong>Affected:</strong> Maven: org.apache.streampark:streampark</p> <p>In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based fuzzy search, such as job names, role names, etc. The sql syntax :select * from table where jobName like &#39;%jobName%&#39;. However, the jobName field may receive illegal parameters, leading to SQL injection. This could potentially result in information leakage.</p> <p>Mitigation:</p> <p>Users are recommended to upgrade to version 2.1.2, which fixes the issue.</p> <p><strong>Affected:</strong> Maven: org.apache.streampark:streampark</p> <p>In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based fuzzy search, such as job names, role names, etc. The sql syntax :select * from table where jobName like &#39;%jobName%&#39;. However, the jobName field may receive illegal parameters, leading to SQL injection. This could potentially result in information leakage.</p> <p>Mitigation:</p> <p>Users are recommended to upgrade to version 2.1.2, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-rrcg-jwr5-32g7 https://cve.radiocsirt.org/vuln/gsd-2023-30867 gsd-2023-30867 https://cve.radiocsirt.org/vuln/gsd-2023-30867