CVE-2024-24778: 
Java vulnerability analysis and mitigation

A vulnerability in Apache StreamPipes through version 0.95.1 has been identified as CVE-2024-24778. The issue involves improper privilege management in a REST interface that allows registered users to access unauthorized resources when the resource ID is known. The vulnerability was disclosed on March 3, 2025, and has been classified as important (OSS Security).

The vulnerability is classified as CWE-269 (Improper Privilege Management) and has received a CVSS 3.1 Base Score of 6.5 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. This scoring indicates that the vulnerability requires network access, low attack complexity, low privileges, and no user interaction, while potentially resulting in high confidentiality impact (NVD).

The vulnerability allows registered users to access unauthorized resources within the Apache StreamPipes system when they know the resource ID. This could lead to unauthorized access to sensitive information, potentially compromising the confidentiality of protected resources (OSS Security).

Users are strongly recommended to upgrade to Apache StreamPipes version 0.97.0, which contains the fix for this vulnerability (OSS Security).