TI-2026-54363 CVE-2026-78166 · GHSA-332v-m8g2-mqf5
provectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injection
Priority MEDIUM 57
A security flaw has been discovered in provectus kafka-ui up to 0.7.2.
4 records
A security flaw has been discovered in provectus kafka-ui up to 0.7.2.
A vulnerability was identified in provectus kafka-ui up to 0.7.2.
Kafka UI is an Open-Source Web UI for Apache Kafka Management.
An issue discovered in provectus kafka-ui 0.4.0 through 0.7.2 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/{topic}/messages.