Severity: moderate
Affected versions:
- Apache SeaTunnel 231 through 2310
Description:
# Summary
Unauthorized users can perform Arbitrary File Read and Deserialization
attack by submit job using restful api-v1
# Details
Unauthorized users can access `/hazelcast/rest/maps/submit-job` to submit
job
An attacker can set extra params in mysq ...