Apache SeaTunnel Web vulnerabilities

2 known vulnerabilities in Apache SeaTunnel Web from Apache. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Apache SeaTunnel Web: Files or Directories Accessible to External Parties

  CVE-2023-49198Aug 21, 2024Apache

  Mysql security vulnerability in Apache SeaTunnel. Attackers can read files on the MySQL server by modifying the information in the MySQL URL allowLoadLocalInfile=true&allowUrlInLocalInfile=true&allowLoadLocalInfileInPath=/&maxAllowedPacket=655360 This issue af

• 9.1 Critical severity

  Apache SeaTunnel Web: Authentication Bypass by Spoofing

  CVE-2023-48396Jul 30, 2024Apache

  Web Authentication vulnerability in Apache SeaTunnel. Since the jwt key is hardcoded in the application, an attacker can forge any token to log in any user. Attacker can get secret key in /seatunnel-server/seatunnel-app/src/main/resources/application.yml and t