3 ways to get Remote Code Execution in Kafka UI
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Scripting - T1064 Scripting
Show in Graph
Common Information
Type Value
UUID 1a3afbdc-c969-417b-b44b-71d688151faf
Fingerprint 104cd9339dab8386
Analysis status DONE
Considered CTI value 2
Text language
Published July 22, 2024, midnight
Added to db Oct. 8, 2024, 9:24 p.m.
Last updated Nov. 17, 2024, 6:50 p.m.
Headline 3 ways to get Remote Code Execution in Kafka UI
Title 3 ways to get Remote Code Execution in Kafka UI
Detected Hints/Tags/Attributes 56/2/21
Source URLs
Redirection Url
Details Source https://github.blog/security/vulnerability-research/3-ways-to-get-remote-code-execution-in-kafka-ui/
URL Provider
Details Provider Source level domain
Details github.blog github.blog
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 126 ✔ The latest security news for developers - The GitHub Blog https://github.blog/category/security/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 1 
cve-2023-52251
Details CVE 2 
cve-2024-32030
Details CVE 9 
cve-2023-25194
Details Domain 1 
pi.read
Details Domain 1 
pe.read
Details Domain 1 
si.read
Details Domain 180 
readme.md
Details Domain 1 
scala1.java
Details Domain 1 
commonscollections7.java
Details Domain 1 
streamremotecall.java
Details Domain 4 
com.sun.security
Details File 5 
host.doc
Details File 1 
dynamic.config
Details File 1 
internal.doc
Details File 4 
6-snapshot-all.jar
Details File 1 
scala1.java
Details File 1 
commonscollections7.java
Details File 1 
streamremotecall.java
Details File 4 
jaas.config
Details File 2 
provider.url
Details IPv4 1441 
127.0.0.1