📦 Seatunnel

This CVE describes an authentication bypass vulnerability in Apache SeaTunnel where a hardcoded JWT secret key allows attackers to forge authentication tokens. Attackers can impersonate any user and g...

Unauthorized attackers can exploit Apache SeaTunnel's REST API to read arbitrary files and perform deserialization attacks by submitting malicious jobs. This affects all Apache SeaTunnel installations...