CVE-2024-32030

creationtimestamp| type| source ---|---|--- 2024-06-24 15:07:04+00:00| published-proof-of-concept| https://t.me/CNArsenal/2704 2024-07-24 12:51:30+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10876 2024-08-01 00:41:31+00:00| published-proof-of-concept|...

Exploit for CVE-2024-32030

CVE-2024-32030 Nuclei Template Description This repository...

CVE-2024-32030 Remote code execution via JNDI resolution in JMX metrics collection in Kafka UI

Kafka UI is an Open-Source Web UI for Apache Kafka Management. Kafka UI API allows users to connect to different Kafka brokers by specifying their network address and port. As a separate feature, it also provides the ability to monitor the performance of Kafka brokers by connecting to their JMX...

CVE-2024-32030

CVE-2024-32030 affects Kafka UI (Apache Kafka UI) where JMX metrics collection over RMI is vulnerable to deserialization attacks. Reports describe post-auth remote code execution via malicious JMX/JNDI gadget chains in the Kafka UI classpath, potentially exploitable if dynamic.config.enabled is e...

CVE-2024-32030 Remote code execution via JNDI resolution in JMX metrics collection in Kafka UI

Kafka UI is an Open-Source Web UI for Apache Kafka Management. Kafka UI API allows users to connect to different Kafka brokers by specifying their network address and port. As a separate feature, it also provides the ability to monitor the performance of Kafka brokers by connecting to their JMX...