cve/2023/CVE-2023-52251.md

CVE-2023-52251

Description

An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/{topic}/messages.

POC

Reference

• http://packetstormsecurity.com/files/177214/Kafka-UI-0.7.1-Command-Injection.html
• https://github.com/BobTheShoplifter/CVE-2023-52251-POC

Github

• https://github.com/BobTheShoplifter/CVE-2023-52251-POC
• https://github.com/Drun1baby/CVE-Reproduction-And-Analysis
• https://github.com/Mr-xn/Penetration_Testing_POC
• https://github.com/Ostorlab/KEV
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/wy876/POC