All products

org.apache.storm:storm-core

Maven · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Storm Local Information Disclosure Vulnerability in Storm-core on Unix-Like systems due temporary files CVE-2023-43123 · GHSA-85P4-Q357-72H9 org.apache.storm:storm-core Maven Medium Fix reported
Apache Storm it is possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, userCVE-2017-9799 · GHSA-X825-RJWW-2245 org.apache.storm:storm-core Maven High Fix reported
Code execution in org.apache.storm:storm-coreCVE-2018-1331 · GHSA-P8JX-X2VW-WM33 org.apache.storm:storm-core Maven High Fix reported
ZipSlip in org.apache.storm:storm-coreCVE-2018-8008 · GHSA-898J-5CC8-CMF5 org.apache.storm:storm-core Maven Medium Fix reported
Exposure of Sensitive Information in Apache Storm LogviewerCVE-2019-0202 · GHSA-R9PV-HG64-JQRP org.apache.storm:storm-core Maven High Fix reported
Moderate severity vulnerability that affects org.apache.storm:storm-coreCVE-2018-1332 · GHSA-Q35P-CHC6-7X57 org.apache.storm:storm-core Maven Medium Fix reported