CVE-2024-30471CWE-367

Apache StreamPipes: Potential creation of multiple identical accounts

Medium · published July 17, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
51.0
In the wild
Unconfirmed
What it is

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration.

This allows an attacker to potentially request the creation of multiple accounts with the same email address until the email address is registered, creating many identical users and corrupting StreamPipe's user management.

This issue affects Apache StreamPipes: through 0.93.0.

Users are recommended to upgrade to version 0.95.0, which fixes the issue.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00660 · 51.0th percentile
Weakness
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2024-07-17T09:01Z
EPSS history
Timeline
  • 17 JUL 09:01Z
    Apache StreamPipes: Potential creation of multiple identical accounts
    cvelistv5