writeups.xyz / CVE-2023-34040 Spring Kafka Deserialization Remote Code Execution

Submitter : c2a

Date: 15 September 2023

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization
• RCE

Programs :

• VMware (Spring Kafka)

Authors :

• Pyn3rd (@Pyn3rd)

Link :
https://pyn3rd.github.io/2023/09/15/CVE-2023-34040-Spring-Kafka-Deserialization-Remote-Code-Execution/