CVE-2023-25194

A security vulnerability in the Apache Kafka Connect API (and brokers) allows an authenticated operator to execute arbitrary code or cause a denial of service. By creating or modifying connectors via the REST API, an attacker can set the sasl.jaas.config property to com.sun.security.auth.module.J...