CVE-2024-29178: Apache Streampark

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

On versions before 2.1.4, a user could log in and perform a template injection attack resulting in Remote Code Execution on the server, The attacker must successfully log into the system to launch an attack, so this is a moderate-impact vulnerability. Mitigation: all users should upgrade to 2.1.4

Affected products

• Apache Streampark: before 2.1.4 (fixed in 2.1.4)

Published 2024-07-18. Last modified 2026-06-17.