DeutschShown in its original language — a full translation is planned for a future version.
Apache Kafka: Schwachstelle ermöglicht Codeausführung
view advisory published 2023-02-07
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Kafka ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-25194US | high8.8 | Exploit | ||
A possible security vulnerability has been identified in Apache Kafka Connect API.
This requires access to a Kafka Connect worker, and the ability to create/modify connectors on it… | ||||
02
references
External citations — patches, advisories, analysis.
- PoC auf hackerone.comexternal
- Apache Security Advisory vom 2023-02-07external
- WID-SEC-W-2023-0300 - CSAF Versionself
- WID-SEC-2023-0300 - Portal Versionself
- IBM Security Bulletin 6963562 vom 2023-03-29external
- IBM Security Bulletin 6967573 vom 2023-03-31external
- IBM Security Bulletin 7001787 vom 2023-06-07external
- IBM Security Bulletin 7010099 vom 2023-07-06external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan