CVE-2025-30065 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code Users are recommended to…
Critical CVSS: 10.0

CVE-2025-30065

Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code


Users are recommended to upgrade to version 1.15.1, which fixes the issue.
Vendor
Apache
Product
Parquet Java
CWE
CWE-502
Yayın Tarihi
2025-04-01 08:15:15
Güncelleme
2025-07-28 14:23:34
Source Identifier
security@apache.org
KEV Date Added
-

Kategoriler

CWE-502 Parquet Java CRITICAL Apache 2025

Referanslar

https://lists.apache.org/thread/okzqb3kn479gqzxm21gg5vqr35om9gw5 http://www.openwall.com/lists/oss-security/2025/04/01/1 https://access.redhat.com/security/cve/CVE-2025-30065 https://github.com/apache/parquet-java/pull/3169 https://news.ycombinator.com/item?id=43603091 https://www.bleepingcomputer.com/news/security/max-severity-rce-flaw-discovered-in-widely-used-apache-parquet/ https://github.com/h3st4k3r/CVE-2025-30065/blob/main/POC-CVE-2025-30065-ParquetExploitGenerator.java https://github.com/mouadk/parquet-rce-poc-CVE-2025-30065/blob/main/src/main/java/com/evil/GenerateMaliciousParquetSSRF.java