CVE-2025-47411

A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apache StreamPipes that allows them to swap the username of an existing user with that of an administrator. This vulnerability allows an attacker to gain administrative control over the application by manipulating JWT tokens, which can lead to data tampering, unauthorized access and other security issues. This issue affects Apache StreamPipes: through 0.97.0. Users are recommended to upgrade to version 0.98.0, which fixes the issue.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://lists.apache.org/thread/lngko4ht2ok3o0rk9h0clgm4kb0lmt36	Mailing List Vendor Advisory
http://www.openwall.com/lists/oss-security/2025/12/29/14	Mailing List Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:streampipes:*:*:*:*:*:*:*:*

History

01 Oct 2026, 08:10

Type	Values Removed	Values Added
Summary		(es) Un usuario con una cuenta legítima que no es de administrador puede explotar una vulnerabilidad en el mecanismo de creación de ID de usuario en Apache StreamPipes que les permite intercambiar el nombre de usuario de un usuario existente con el de un administrador. Esta vulnerabilidad permite a un atacante obtener control administrativo sobre la aplicación manipulando tokens JWT, lo que puede llevar a la manipulación de datos, acceso no autorizado y otros problemas de seguridad. Este problema afecta a Apache StreamPipes: hasta la versión 0.97.0. Se recomienda a los usuarios actualizar a la versión 0.98.0, que corrige el problema.

Information

Published : 2026-01-01 17:15

Updated : 2026-10-07 11:10

NVD link : CVE-2025-47411

Mitre link : CVE-2025-47411

CVE.ORG link : CVE-2025-47411

JSON object : View

Products Affected

apache

streampipes

CWE

CWE-269

Improper Privilege Management

{"id": "CVE-2025-47411", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-47411", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-01-05T15:12:47.703514Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security@apache.org", "affectedData": [{"vendor": "Apache Software Foundation", "product": "Apache StreamPipes", "versions": [{"status": "affected", "version": "0.69.0", "versionType": "maven", "lessThanOrEqual": "0.97.0"}], "defaultStatus": "unaffected"}]}], "published": "2026-01-01T17:15:42.943", "references": [{"url": "https://lists.apache.org/thread/lngko4ht2ok3o0rk9h0clgm4kb0lmt36", "tags": ["Mailing List", "Vendor Advisory"], "source": "security@apache.org"}, {"url": "http://www.openwall.com/lists/oss-security/2025/12/29/14", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@apache.org", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apache StreamPipes that allows them to swap the username of an existing user with that of an administrator.\u00a0\n\nThis vulnerability allows an attacker to gain administrative control over the application by manipulating JWT tokens, which can lead to data tampering, unauthorized access and other security issues.\n\n\n\n\n\n\nThis issue affects Apache StreamPipes: through 0.97.0.\n\nUsers are recommended to upgrade to version 0.98.0, which fixes the issue."}, {"lang": "es", "value": "Un usuario con una cuenta leg\u00edtima que no es de administrador puede explotar una vulnerabilidad en el mecanismo de creaci\u00f3n de ID de usuario en Apache StreamPipes que les permite intercambiar el nombre de usuario de un usuario existente con el de un administrador.\n\nEsta vulnerabilidad permite a un atacante obtener control administrativo sobre la aplicaci\u00f3n manipulando tokens JWT, lo que puede llevar a la manipulaci\u00f3n de datos, acceso no autorizado y otros problemas de seguridad.\n\nEste problema afecta a Apache StreamPipes: hasta la versi\u00f3n 0.97.0.\n\nSe recomienda a los usuarios actualizar a la versi\u00f3n 0.98.0, que corrige el problema."}], "lastModified": "2026-10-07T11:10:00.153", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apache:streampipes:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4FEF6DA0-6120-4ACC-A72B-16ED5CF15E1B", "versionEndExcluding": "0.98.0", "versionStartIncluding": "0.69.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@apache.org"}