Apache Kafka UI RCEs

[h00die]

Summary

3 new RCEs in Apache Kafka UI

Basic example

https://github.blog/security/vulnerability-research/3-ways-to-get-remote-code-execution-in-kafka-ui/

Motivation

RCE is king

[gardnerapp]

Just a heads up there is already an exploit for the first vulnerability in the post