CVE-2024-30471
LOWApache StreamPipes <= 0.93.0 - Time-of-check Time-of-use Race Condition in User Self-Registration
Title source: llmDescription
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration. This allows an attacker to potentially request the creation of multiple accounts with the same email address until the email address is registered, creating many identical users and corrupting StreamPipe's user management. This issue affects Apache StreamPipes: through 0.93.0. Users are recommended to upgrade to version 0.95.0, which fixes the issue.
References (2)
Core 2
Core References
Mailing List, Vendor Advisory vendor-advisory
https://lists.apache.org/thread/8yodrmohgcybq900or3d4hc1msl230fr
Scores
CVSS v3
3.7
EPSS
0.0140
EPSS Percentile
80.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-367
Status
published
Products (3)
apache/streampipes
< 0.95.0
org.apache.streampipes/streampipes-parent
0 - 0.95.0Maven
pypi/streampipes
0 - 0.95.0PyPI
Published
Jul 17, 2024
Tracked Since
Feb 18, 2026