writeups.xyz / 3 ways to get Remote Code Execution in Kafka UI

Submitter : c2a

Date: 23 July 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• Insecure Deserialization
• Groovy Scripting
• JMX

Programs :

• Kafka UI

Authors :

• Michael Stepankin (@Artsploit)

Link :
https://github.blog/security/vulnerability-research/3-ways-to-get-remote-code-execution-in-kafka-ui/