Apache Flume vulnerabilities
3 known vulnerabilities in Apache Flume from Apache. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Apache Flume versions 1.4.0 through 1.10.1 are vulnerable to a remote code execution (RCE)…
Apache Flume versions 1.4.0 through 1.10.1 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with an unsafe providerURL. This issue is fixed by limiting JNDI to allow only the use of the java protocol or no protocol.
- 9.8 Critical severity
Apache Flume versions 1.4.0 through 1.10.0 are vulnerable to a remote code execution (RCE)…
Apache Flume versions 1.4.0 through 1.10.0 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JN
- 9.8 Critical severity
Apache Flume versions 1.4.0 through 1.9.0 are vulnerable to a remote code execution (RCE)…
Apache Flume versions 1.4.0 through 1.9.0 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JND