CVE-2024-30471
published 2024-07-17CVE-2024-30471: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration. This allows an attacker to potentially request…
PriorityP414low3.7CVSS 3.1
AVNACHPRNUINSUCNILAN
EPSS
0.66%
47.3th percentile
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration.
This allows an attacker to potentially request the creation of multiple accounts with the same email address until the email address is registered, creating many identical users and corrupting StreamPipe's user management.
This issue affects Apache StreamPipes: through 0.93.0.
Users are recommended to upgrade to version 0.95.0, which fixes the issue.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | streampipes | < 0.95.0 | 0.95.0 |
| apache | streampipes | >= 0 < 0.95.0 | 0.95.0 |
| apache_software_foundation | apache_streampipes | <= 0.93.0 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Apache StreamPipes potentially allows creation of multiple identical accounts
ghsa·2024-07-17
CVE-2024-30471 [MEDIUM] CWE-367 Apache StreamPipes potentially allows creation of multiple identical accounts
Apache StreamPipes potentially allows creation of multiple identical accounts
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration.
This allows an attacker to potentially request the creation of multiple accounts with the same email address until the email address is registered, creating many identical users and corrupting StreamPipe's user management.
This issue affects Apache StreamPipes: through 0.93.0.
Users are recommended to upgrade to version 0.95.0, which fixes the issue.
OSV
Apache StreamPipes potentially allows creation of multiple identical accounts
osv·2024-07-17
CVE-2024-30471 [MEDIUM] Apache StreamPipes potentially allows creation of multiple identical accounts
Apache StreamPipes potentially allows creation of multiple identical accounts
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration.
This allows an attacker to potentially request the creation of multiple accounts with the same email address until the email address is registered, creating many identical users and corrupting StreamPipe's user management.
This issue affects Apache StreamPipes: through 0.93.0.
Users are recommended to upgrade to version 0.95.0, which fixes the issue.
OSV
CVE-2024-30471: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration
osv·2024-07-17
CVE-2024-30471 CVE-2024-30471: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration.
This allows an attacker to potentially request the creation of multiple accounts with the same email address until the email address is registered, creating many identical users and corrupting StreamPipe's user management.
This issue affects Apache StreamPipes: through 0.93.0.
Users are recommended to upgrade to version 0.95.0, which fixes the issue.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-07-17
Published