CVE-2024-30471

MEDIUM Year: 2024
CVSS v3 Score
5.3
Medium
Weakness Type
CWE-367
View all →

Vulnerability Description

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration. This allows an attacker to potentially request the creation of multiple accounts with the same email address until the email address is registered, creating many identical users and corrupting StreamPipe's user management. This issue affects Apache StreamPipes: through 0.93.0. Users are recommended to upgrade to version 0.95.0, which fixes the issue.

Related Vulnerabilities

CVE-2017-11830

MEDIUM
CVSS:5.3(Medium)

Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file appear to be signed, due to a security fe...

CWE-3672017

CVE-2020-8867

MEDIUM
CVSS:5.3(Medium)

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard 1.04.358.30. Authentication is not required to exploit t...

CWE-3672020

CVE-2021-0289

MEDIUM
CVSS:5.3(Medium)

When user-defined ARP Policer is configured and applied on one or more Aggregated Ethernet (AE) interface units, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability between the Device Co...

CWE-3672021

CVE-2021-21615

MEDIUM
CVSS:5.3(Medium)

Jenkins 2.275 and LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifacts due to a time-of-check to time-of-use (TOCTOU) race condition.

CWE-3672021

CVE-2021-23977

MEDIUM
CVSS:5.3(Medium)

Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories. Note: This issue is only affected ...

CWE-3672021

CVE-2022-23029

MEDIUM
CVSS:5.3(Medium)

On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile is configured on a virtual server, undisclos...

CWE-3672022