.. / CVE-2023-52251

• RCE
• Nuclei
• Web

Exploit for Kafka UI 0.7.1 Command Injection (CVE-2023-52251)

Description:

An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/{topic}/messages.

Nuclei Template

View the template here CVE-2023-52251.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-52251.yaml

References: