CloudMap 漏洞情报库

高危CVE-2025-278172026/01/30

Apache Kafka Client - Arbitrary File Read

Apache Kafka Client contains arbitrary file read and server-side request forgery caused by untrusted configuration of sasl.oauthbearer.token.endpoint.url and sasl.oauthbearer.jwks.endpoint.url, letting attackers read files or send requests to unintended locations, exploit requires untrusted party to specify client configurations.

KafkaPoC 已收录

CVSS—

高危2025/12/18

Kafka Operation API - Cluster

Kafka Operation API Cluster page was detected and appeared to be accessible without authentication.

kafka-ui Kafka kafka_connectPoC 已收录

CVSS—

低危2024/07/23

Kafka Topics Enumeration

Kafka topics are logical data streams that store and organize messages in Apache Kafka. They provide a way for data to be published, subscribed to, and processed by Kafka consumers.

Kafka

CVSS—

低危2022/12/12

Kafka Manager Panel - Unauthorized Access

A kafka manager unauthorized access was discovered.

KafkaPoC 已收录

CVSS—

Kafka

关联漏洞

Apache Kafka Client - Arbitrary File Read

Kafka Operation API - Cluster

Kafka Topics Enumeration

Kafka Manager Panel - Unauthorized Access