Apache Software Foundation Apache Kafka Connect Api vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_kafka_connect_api.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

1

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2023-25194HIGHCVSS 8.8ExploitedPoC≥ 2.3.0, < 3.4.02023-02-07

CVE-2023-25194 [HIGH] CWE-502 Apache Kafka Connect API: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration using Kafka Connect Apache Kafka Connect API: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration using Kafka Connect A possible security vulnerability has been identified in Apache Kafka Connect API. This requires access to a Kafka Connect worker, and the ability to create/modify connectors on it with an arbitrary Kafka client S