Apache StreamPark SQL Injection Vulnerability

A SQL injection vulnerability exists in Apache StreamPark versions 2.1.4 prior to 2.1.6. This issue is limited to the distribution package on the SpringBoot platform and does not affect Maven artifacts. The vulnerability can only be exploited by users who have successfully logged into the platform, indicating a need to compromise login authentication first. Therefore, the overall risk is considered relatively low.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can manipulate database queries. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.

Remediation

Users are advised to upgrade to Apache StreamPark version 2.1.6, which addresses this vulnerability.