Skip to content
OpenAdvisories

Package · Maven

org.apache.pulsar:pulsar

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-24280

    Apache Pulsar Proxy target broker address isn't validated

    Improper Input Validation vulnerability in Proxy component of Apache Pulsar allows an attacker to make TCP/IP connection attempts that originate from the Pulsar Proxy's IP address. When the Apache Pulsar Proxy component is used, it is possible to attempt to o…

    Apache Software Foundation Apache Pulsar org.apache.pulsar:pulsar Maven
  • Medium 6.5
    CVE-2021-41571

    Pulsar Admin API allows access to data from other tenants using getMessageById API

    In Apache Pulsar it is possible to access data from BookKeeper that does not belong to the topics accessible by the authenticated user. The Admin API get-message-by-id requires the user to input a topic and a ledger id. The ledger id is a pointer to the data,…

    Apache Software Foundation Apache Pulsar org.apache.pulsar:pulsar Maven