CVE-2023-52251-POC

CVE-2023-52251-POC 存在一个远程代码执行漏洞，影响 provectus/kafka-ui。截至撰写本文时，尚无补丁，但我们已经通知了厂商以及 VINCE 团队，未收到任何回应。报告已于 2023 年 9 月 27 日通过电子邮件和 GitHub Security 发送给 provectus。 修复方案 我们建议至少将整个 groovy 过滤器函数注释掉/添加身份验证。 元数据...

Kafka UI 0.7.1 Command Injection

An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/topic/messages. id: CVE-2023-52251 info: name: Kafka UI 0.7.1 Command Injection author: yhy0,iamnoooob severity: high description: | An...

Provectus kafka-ui <=0.7.2 - Remote Code Execution

Provectus kafka-ui versions 0.7.0 through 0.7.2 are vulnerable to code injection in the /api/smartfilters/testexecutions endpoint. The filterCode parameter is evaluated as a Groovy expression without sandboxing, allowing an unauthenticated attacker to execute arbitrary code and operating-system...

CLEANSTART-2026-FD72989 Security fix for ghsa-6r3c-xf4w-jxjm applied in: kafka-ui 1.2.0-r1, kafka-ui 1.3.0-r1

ghsa-6r3c-xf4w-jxjm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WO51602 Security fix for CVE-2026-22751 applied in: apache-nifi 2.7.2-r7, cloud-config-server 4.1.7-r2, cloud-config-server 4.2.4-r0, cloud-config-server 4.3.2-r2, cloud-config-server 4.3.4-r0, kafka-ui 1.4.2-r6, rundeck 6.0.0-r0

CVE-2026-22751 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-78166

A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/provectus/kafka/ui/controller/MessagesController.java of the component Groovy Code Handler. The manipulation results in cod...

EUVD-2026-64686

A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/provectus/kafka/ui/controller/MessagesController.java of the component Groovy Code Handler. The manipulation results in cod...

CVE-2026-78166

A code injection vulnerability was identified in provectus kafka-ui (up to 0.7.2), affecting the Groovy Code Handler component. Specifically, the executeSmartFilterTest function in MessagesController.java can be exploited remotely to inject and execute arbitrary code. The exploit has been release...

CVE-2026-78166 provectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injection

A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/provectus/kafka/ui/controller/MessagesController.java of the component Groovy Code Handler. The manipulation results in cod...

CVE-2026-78166 provectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injection

A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/provectus/kafka/ui/controller/MessagesController.java of the component Groovy Code Handler. The manipulation results in cod...

CLEANSTART-2026-ND94997 Security fixes in kafka-ui 1.4.2-r5

Package kafka-ui version 1.4.2-r5 fixes 16 vulnerabilities: ghsa-w9fj-cfpg-grvv, ghsa-4773-3jfm-qmx3, ghsa-pwqr-wmgm-9rr8, ghsa-mf92-479x-3373, ghsa-6hcq-hmm3-jj3c...

CLEANSTART-2026-LR50092 Security fixes in kafka-ui 1.2.0-r3

Package kafka-ui version 1.2.0-r3 fixes 1 vulnerabilities: ghsa-qqpg-mvqg-649v...

CLEANSTART-2026-BV41278 Security fixes in kafka-ui 1.3.0-r2

Package kafka-ui version 1.3.0-r2 fixes 13 vulnerabilities: ghsa-w9fj-cfpg-grvv, ghsa-4773-3jfm-qmx3, ghsa-pwqr-wmgm-9rr8, ghsa-mf92-479x-3373, ghsa-6hcq-hmm3-jj3c...

CLEANSTART-2026-JJ27428 Security fixes in kafka-ui 1.4.2-r6

Package kafka-ui version 1.4.2-r6 fixes 46 vulnerabilities: CVE-2026-40973, CVE-2026-42579, CVE-2026-42583, CVE-2026-42584, CVE-2026-42585...

CVE-2026-5562

A vulnerability was identified in provectus kafka-ui up to 0.7.2. This impacts the function validateAccess of the file /api/smartfilters/testexecutions of the component Endpoint. The manipulation leads to code injection. The attack can be initiated remotely. The exploit is publicly available and...

EUVD-2026-19071

A vulnerability was identified in provectus kafka-ui up to 0.7.2. This impacts the function validateAccess of the file /api/smartfilters/testexecutions of the component Endpoint. The manipulation leads to code injection. The attack can be initiated remotely. The exploit is publicly available and...

CVE-2026-5562

A vulnerability was identified in provectus kafka-ui up to 0.7.2. This impacts the function validateAccess of the file /api/smartfilters/testexecutions of the component Endpoint. The manipulation leads to code injection. The attack can be initiated remotely. The exploit is publicly available and...

CVE-2026-5562 provectus kafka-ui Endpoint testexecutions validateAccess code injection

A vulnerability was identified in provectus kafka-ui up to 0.7.2. This impacts the function validateAccess of the file /api/smartfilters/testexecutions of the component Endpoint. The manipulation leads to code injection. The attack can be initiated remotely. The exploit is publicly available and...

CVE-2026-5562 provectus kafka-ui Endpoint testexecutions validateAccess code injection

A vulnerability was identified in provectus kafka-ui up to 0.7.2. This impacts the function validateAccess of the file /api/smartfilters/testexecutions of the component Endpoint. The manipulation leads to code injection. The attack can be initiated remotely. The exploit is publicly available and...

CVE-2026-5562 provectus kafka-ui Endpoint testexecutions validateAccess code injection

A vulnerability was identified in provectus kafka-ui up to 0.7.2. This impacts the function validateAccess of the file /api/smartfilters/testexecutions of the component Endpoint. The manipulation leads to code injection. The attack can be initiated remotely. The exploit is publicly available and...