Remote Code Execution

org.apache.streampark, streampark is vulnerable to Remote Code Execution. The vulnerability is caused due to a missing check on the compilation parameters of maven used in a project module that is used to integrate Maven’s compilation capability. This can lead to an attacker inserting remote commands while executing maven commands leading to Remote Command Execution. The prerequisite for this vulnerability is that the user needs to log in to the streampark system and have system-level permissions.