Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-52251

An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/{topic}/messages.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.94
EPSS Ranking 99.9%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2023-52251
  • Provectus » Ui » Version: 0.4.0
    cpe:2.3:a:provectus:ui:0.4.0
  • Provectus » Ui » Version: 0.4.4
    cpe:2.3:a:provectus:ui:0.4.4
  • Provectus » Ui » Version: 0.4.5
    cpe:2.3:a:provectus:ui:0.4.5
  • Provectus » Ui » Version: 0.4.6
    cpe:2.3:a:provectus:ui:0.4.6
  • Provectus » Ui » Version: 0.5.0
    cpe:2.3:a:provectus:ui:0.5.0
  • Provectus » Ui » Version: 0.5.1
    cpe:2.3:a:provectus:ui:0.5.1
  • Provectus » Ui » Version: 0.5.2
    cpe:2.3:a:provectus:ui:0.5.2
  • Provectus » Ui » Version: 0.5.3
    cpe:2.3:a:provectus:ui:0.5.3
  • Provectus » Ui » Version: 0.5.4
    cpe:2.3:a:provectus:ui:0.5.4
  • Provectus » Ui » Version: 0.6.0
    cpe:2.3:a:provectus:ui:0.6.0
  • Provectus » Ui » Version: 0.6.1
    cpe:2.3:a:provectus:ui:0.6.1
  • Provectus » Ui » Version: 0.6.2
    cpe:2.3:a:provectus:ui:0.6.2
  • Provectus » Ui » Version: 0.7.0
    cpe:2.3:a:provectus:ui:0.7.0
  • Provectus » Ui » Version: 0.7.1
    cpe:2.3:a:provectus:ui:0.7.1


Contact Us

Shodan ® - All rights reserved