GCVE - cpe:2.3:a:knowstreaming_project:knowstreaming:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:knowstreaming_project:knowstreaming:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Knowstreaming Project (`47277c1e-8ba8-5b1e-aa57-8e14699b4394`)
Product	Knowstreaming (`7b00ad02-80e6-5492-9ff2-5e2de0a34be4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-92780`	vulnerable	2026-10-13 12:28:53.481810	KnowStreaming through 3.4.1 Missing Authorization on the REST API HIGH (8.8) KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated user to access protected functionality. Attackers can call identity-management endpoints to create administrator accounts or grant themselves administrative privileges without proper authorization. Published: 2026-09-16T20:32:38.224Z Updated: 2026-09-17T15:03:02.465Z Open on db.gcve.eu Reference links https://github.com/didi/KnowStreaming/issues/1263 https://github.com/didi/KnowStreaming https://github.com/didi/KnowStreaming/blob/v3.4.0/km-rest/src/main/java/com/xiaojukeji/know/streaming/km/rest/interceptor/PermissionInterceptor.java#L46-L74 https://www.vulncheck.com/advisories/knowstreaming-through-3.4.1-missing-authorization-on-the-rest-api	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.