Lightbend

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Lightbend records in CISA KEV

No Lightbend vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Play Framework 11 records MEDIUM Akka Http 2 records LOW Spray-json 2 records LOW Akka 1 record MEDIUM Akka-http 1 record LOW Akka Actor 1 record MEDIUM Akka Discovery 1 record MEDIUM Alpakka Kafka 1 record LOW

Records

1 record in Alpakka Kafka · all components

TI-2023-13847 CVE-2023-29471 · GHSA-55vq-xpjf-r2xc

Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and…

LOW 24

Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials (if plain cleartext login is configured).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00152 Published 2023-04-27 Fixed in 4.0.2 CWE-312

Open these records in search →

Critical	2
High	12
Medium	5
Low	1
No CVSS	0