Filtered by vendor Provectus Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-60536 1 Provectus 1 Kafka-ui 2025-10-23 7.5 High
An issue in the Configure New Cluster interface of kafka-ui v0.6.0 to v0.7.2 allows attackers to cause a Denial of Service (DoS) via uploading a crafted configuration file.
CVE-2025-60537 1 Provectus 1 Kafka-ui 2025-10-23 6.5 Medium
Improper input validation in the component /kafka/ui/serdes/CustomSerdeLoader.java of kafka-ui v0.6.0 to v0.7.2 allows attackers to execute arbitrary code via supplying crafted data.
CVE-2023-52251 1 Provectus 1 Ui 2025-06-17 8.8 High
An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/{topic}/messages.