CVE-2024-24778
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 3, 2025
CWE ID 269
Summary
CVE-2024-24778 is a privilege escalation vulnerability affecting Apache StreamPipes, specifically its REST interface. The flaw allows registered users to gain unauthorized access to resources if the resource ID is known. This issue can lead to potential data breaches and unintended system modifications. Affected versions include those up to 0.95.1. To mitigate this risk, users are advised to upgrade to the latest version, 0.97.0, which includes the necessary security fix.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Apache Software Foundation