Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Kafka Connect API

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-25194 Public exploit EPSS 96%

    Apache Kafka Connect API: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration using Kafka Connect

    A possible security vulnerability has been identified in Apache Kafka Connect API. This requires access to a Kafka Connect worker, and the ability to create/modify connectors on it with an arbitrary Kafka client SASL JAAS config and a SASL-based security prot…

    Apache Software Foundation Apache Kafka Connect API org.apache.kafka:connect Maven