CVE-2022-46365: Apache StreamPark Improper Input Validation vulnerability
Summary
CVE-2022-46365: Apache StreamPark Improper Input Validation vulnerability. Affects org.apache.streampark:streampark versions >= 1.0.0, < 2.0.0. Fixed in 2.0.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Apache StreamPark is a software package that provides functionality for managing user profiles. It allows users to log in and modify their profile information. The package is commonly used in Maven projects. However, versions 1.0.0 to 2.0.0 of Apache StreamPark are vulnerable to an improper input validation issue.
Vulnerability Detail
The vulnerability in Apache StreamPark arises when a user successfully logs in and attempts to modify their profile. The username is passed to the server-layer as a parameter without proper verification. This allows malicious attackers to send any username to modify and reset the account, potentially gaining unauthorized access. The issue poses a critical risk to the security and integrity of user accounts.
How To Fix
Latest published version: 2.1.5 as of 23 Oct 2026
Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2.0.0
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. Upgrading to Apache StreamPark 2.0.0 or later is the recommended solution.
Conclusion
The Apache StreamPark package, versions 1.0.0 to 2.0.0, is vulnerable to an improper input validation issue that allows unauthorized modification of user accounts. Users should upgrade to Apache StreamPark 2.0.0 or later to mitigate this vulnerability. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for org.apache.streampark:streampark →
FAQ
Apache StreamPark is a software package that provides functionality for managing user profiles in Maven projects.
Versions 1.0.0 to 2.0.0 of Apache StreamPark are affected by this vulnerability.
The vulnerability allows malicious attackers to modify and reset user accounts, potentially gaining unauthorized access.
To fix this vulnerability, upgrade to Apache StreamPark 2.0.0 or later.
There is no known workaround. Upgrading to Apache StreamPark 2.0.0 or later is the recommended solution.
References
Related vulnerabilities
Recent vulnerabilities recorded for org.apache.streampark:streampark.
