https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:35:15 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-06880 bdu:2025-06880 https://cve.radiocsirt.org/vuln/bdu:2025-06880 https://cve.radiocsirt.org/vuln/bit-kafka-2025-27817 <p><strong>Affected:</strong> Bitnami: kafka</p> <p>A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including &#34;sasl.oauthbearer.token.endpoint.url&#34; and &#34;sasl.oauthbearer.jwks.endpoint.url&#34;. Apache Kafka allows clients to read an arbitrary file and return the content in the error log, or sending requests to an unintended location. In applications where Apache Kafka Clients configurations can be specified by an untrusted party, attackers may use the &#34;sasl.oauthbearer.token.endpoint.url&#34; and &#34;sasl.oauthbearer.jwks.endpoint.url&#34; configuratin to read arbitrary contents of the disk and environment variables or make requests to an unintended location. In particular, this flaw may be used in Apache Kafka Connect to escalate from REST API access to filesystem/environment/URL access, which may be undesirable in certain environments, including SaaS products.</p> <p>Since Apache Kafka 3.9.1/4.0.0, we have added a system property (&#34;-Dorg.apache.kafka.sasl.oauthbearer.allowed.urls&#34;) to set the allowed urls in SASL JAAS configuration. In 3.9.1, it accepts all urls by default for backward compatibility. However in 4.0.0 and newer, the default value is empty list and users have to set the allowed urls explicitly.</p> <p><strong>Affected:</strong> Bitnami: kafka</p> <p>A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including &#34;sasl.oauthbearer.token.endpoint.url&#34; and &#34;sasl.oauthbearer.jwks.endpoint.url&#34;. Apache Kafka allows clients to read an arbitrary file and return the content in the error log, or sending requests to an unintended location. In applications where Apache Kafka Clients configurations can be specified by an untrusted party, attackers may use the &#34;sasl.oauthbearer.token.endpoint.url&#34; and &#34;sasl.oauthbearer.jwks.endpoint.url&#34; configuratin to read arbitrary contents of the disk and environment variables or make requests to an unintended location. In particular, this flaw may be used in Apache Kafka Connect to escalate from REST API access to filesystem/environment/URL access, which may be undesirable in certain environments, including SaaS products.</p> <p>Since Apache Kafka 3.9.1/4.0.0, we have added a system property (&#34;-Dorg.apache.kafka.sasl.oauthbearer.allowed.urls&#34;) to set the allowed urls in SASL JAAS configuration. In 3.9.1, it accepts all urls by default for backward compatibility. However in 4.0.0 and newer, the default value is empty list and users have to set the allowed urls explicitly.</p> https://cve.radiocsirt.org/vuln/bit-kafka-2025-27817 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0671 certfr-2025-avi-0671 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0671 https://cve.radiocsirt.org/vuln/cleanstart-2026-bg00340 <p><strong>Affected:</strong> CleanStart: kogito-apps</p> <p>Security vulnerability affects the kogito-apps package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: kogito-apps</p> <p>Security vulnerability affects the kogito-apps package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-bg00340 https://cve.radiocsirt.org/vuln/euvd-2026-243647 EUVD-2026-243647 https://cve.radiocsirt.org/vuln/euvd-2026-243647 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27817 <p>A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including &#34;sasl.oauthbearer.token.endpoint.url&#34; and &#34;sasl.oauthbearer.jwks.endpoint.url&#34;. Apache Kafka allows clients to read an arbitrary file and return the content in the error log, or sending requests to an unintended location. In applications where Apache Kafka Clients configurations can be specified by an untrusted party, attackers may use the &#34;sasl.oauthbearer.token.endpoint.url&#34; and &#34;sasl.oauthbearer.jwks.endpoint.url&#34; configuratin to read arbitrary contents of the disk and environment variables or make requests to an unintended location. In particular, this flaw may be used in Apache Kafka Connect to escalate from REST API access to filesystem/environment/URL access, which may be undesirable in certain environments, including SaaS products.</p> <p>Since Apache Kafka 3.9.1/4.0.0, we have added a system property (&#34;-Dorg.apache.kafka.sasl.oauthbearer.allowed.urls&#34;) to set the allowed urls in SASL JAAS configuration. In 3.9.1, it accepts all urls by default for backward compatibility. However in 4.0.0 and newer, the default value is empty list and users have to set the allowed urls explicitly.</p> <p>A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including &#34;sasl.oauthbearer.token.endpoint.url&#34; and &#34;sasl.oauthbearer.jwks.endpoint.url&#34;. Apache Kafka allows clients to read an arbitrary file and return the content in the error log, or sending requests to an unintended location. In applications where Apache Kafka Clients configurations can be specified by an untrusted party, attackers may use the &#34;sasl.oauthbearer.token.endpoint.url&#34; and &#34;sasl.oauthbearer.jwks.endpoint.url&#34; configuratin to read arbitrary contents of the disk and environment variables or make requests to an unintended location. In particular, this flaw may be used in Apache Kafka Connect to escalate from REST API access to filesystem/environment/URL access, which may be undesirable in certain environments, including SaaS products.</p> <p>Since Apache Kafka 3.9.1/4.0.0, we have added a system property (&#34;-Dorg.apache.kafka.sasl.oauthbearer.allowed.urls&#34;) to set the allowed urls in SASL JAAS configuration. In 3.9.1, it accepts all urls by default for backward compatibility. However in 4.0.0 and newer, the default value is empty list and users have to set the allowed urls explicitly.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-27817 https://cve.radiocsirt.org/vuln/ghsa-vgq5-3255-v292 <p><strong>Affected:</strong> Maven: org.apache.kafka:kafka-clients</p> <p>A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including &#34;sasl.oauthbearer.token.endpoint.url&#34; and &#34;sasl.oauthbearer.jwks.endpoint.url&#34;. Apache Kafka allows clients to read an arbitrary file and return the content in the error log, or sending requests to an unintended location. In applications where Apache Kafka Clients configurations can be specified by an untrusted party, attackers may use the &#34;sasl.oauthbearer.token.endpoint.url&#34; and &#34;sasl.oauthbearer.jwks.endpoint.url&#34; configuratin to read arbitrary contents of the disk and environment variables or make requests to an unintended location. In particular, this flaw may be used in Apache Kafka Connect to escalate from REST API access to filesystem/environment/URL access, which may be undesirable in certain environments, including SaaS products.</p> <p>Since Apache Kafka 3.9.1/4.0.0, we have added a system property (&#34;-Dorg.apache.kafka.sasl.oauthbearer.allowed.urls&#34;) to set the allowed urls in SASL JAAS configuration. In 3.9.1, it accepts all urls by default for backward compatibility. However in 4.0.0 and newer, the default value is empty list and users have to set the allowed urls explicitly.</p> <p><strong>Affected:</strong> Maven: org.apache.kafka:kafka-clients</p> <p>A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including &#34;sasl.oauthbearer.token.endpoint.url&#34; and &#34;sasl.oauthbearer.jwks.endpoint.url&#34;. Apache Kafka allows clients to read an arbitrary file and return the content in the error log, or sending requests to an unintended location. In applications where Apache Kafka Clients configurations can be specified by an untrusted party, attackers may use the &#34;sasl.oauthbearer.token.endpoint.url&#34; and &#34;sasl.oauthbearer.jwks.endpoint.url&#34; configuratin to read arbitrary contents of the disk and environment variables or make requests to an unintended location. In particular, this flaw may be used in Apache Kafka Connect to escalate from REST API access to filesystem/environment/URL access, which may be undesirable in certain environments, including SaaS products.</p> <p>Since Apache Kafka 3.9.1/4.0.0, we have added a system property (&#34;-Dorg.apache.kafka.sasl.oauthbearer.allowed.urls&#34;) to set the allowed urls in SASL JAAS configuration. In 3.9.1, it accepts all urls by default for backward compatibility. However in 4.0.0 and newer, the default value is empty list and users have to set the allowed urls explicitly.</p> https://cve.radiocsirt.org/vuln/ghsa-vgq5-3255-v292 https://cve.radiocsirt.org/vuln/ncsc-2026-0025 NCSC-2026-0025 https://cve.radiocsirt.org/vuln/ncsc-2026-0025 https://cve.radiocsirt.org/vuln/rhsa-2025:23417 <p>kafka: Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout io.vertx/vertx-core: Eclipse Vert.x Access Control Flaw io.vertx/vertx-web: Eclipse Vert.x cross site scripting org.apache.kafka: Kafka Client Arbitrary File Read SSRF apache-kafka: Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration org.apache.kafka: Kafka JNDI Login Module RCE Vulnerability commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang io.quarkus/quarkus-vertx: Quarkus potential data leak netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions netty-codec: netty-codec-compression: Netty&#39;s BrotliDecoder is vulnerable to DoS via zip bomb style attack</p> <p>kafka: Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout io.vertx/vertx-core: Eclipse Vert.x Access Control Flaw io.vertx/vertx-web: Eclipse Vert.x cross site scripting org.apache.kafka: Kafka Client Arbitrary File Read SSRF apache-kafka: Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration org.apache.kafka: Kafka JNDI Login Module RCE Vulnerability commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang io.quarkus/quarkus-vertx: Quarkus potential data leak netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions netty-codec: netty-codec-compression: Netty&#39;s BrotliDecoder is vulnerable to DoS via zip bomb style attack</p> https://cve.radiocsirt.org/vuln/rhsa-2025:23417 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1269 <p>Ein Angreifer kann mehrere Schwachstellen in Apache Kafka ausnutzen, um Informationen offenzulegen, beliebigen Programmcode auszuführen oder einen Denial-of-Service auszulösen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Apache Kafka ausnutzen, um Informationen offenzulegen, beliebigen Programmcode auszuführen oder einen Denial-of-Service auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1269