VDB
BDU%3A2025-03991
BDU%3A2025-03991
PUBLISHED
CVSS 10 CRITICAL
Уязвимость модуля parquet-avro формата столбцового хранения для обработки данных Apache Parquet Java, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Parquet Java |
Timeline
- Apr 9, 2025 CVE Published
- May 7, 2025 CVE Updated
References
- https://news.ycombinator.com/item?id=43603091 url
- https://www.bleepingcomputer.com/news/security/max-severity-rce-flaw-discovered-in-widely-used-apache-parquet/ url
- https://github.com/ron-imperva/CVE-2025-30065-PoC url
- https://www.f5.com/labs/articles/threat-intelligence/canary-exploit-tool-for-cve-2025-30065-apache-parquet-avro-vulnerability?utm_source=Securitylab.ru url
- http://www.openwall.com/lists/oss-security/2025/04/01/1 url
- https://access.redhat.com/security/cve/CVE-2025-30065 url
- https://github.com/apache/parquet-java/pull/3169 url
- https://lists.apache.org/thread/okzqb3kn479gqzxm21gg5vqr35om9gw5 advisory