漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Apache StreamPark (incubating): Logic error causing any account reset
Vulnerability Description
Apache StreamPark 1.0.0 before 2.0.0 When the user successfully logs in, to modify his profile, the username will be passed to the server-layer as a parameter, but not verified whether the user name is the currently logged user and whether the user is legal, This will allow malicious attackers to send any username to modify and reset the account, Users of the affected versions should upgrade to Apache StreamPark 2.0.0 or later.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
Apache StreamPark 输入验证错误漏洞
Vulnerability Description
Apache StreamPark是美国阿帕奇（Apache）基金会的一个流媒体应用程序开发框架。 Apache StreamPark 存在输入验证错误漏洞，该漏洞源于用户修改资料时，会将用户名作为参数传给server层，但不验证用户名是否为当前登录用户。
CVSS Information
N/A
Vulnerability Type
N/A