{"id":"CVE-2023-52251","details":"An issue discovered in provectus kafka-ui 0.4.0 through 0.7.2 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/{topic}/messages. No fixed release is available; the project has had no commit since 2024-04-08.","modified":"2026-09-10T08:24:36.195366Z","published":"2024-01-25T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52251.json"},"references":[{"type":"WEB","url":"http://packetstormsecurity.com/files/177214/Kafka-UI-0.7.1-Command-Injection.html"},{"type":"WEB","url":"https://github.com/provectus/kafka-ui/blob/v0.7.2/kafka-ui-api/src/main/java/com/provectus/kafka/ui/emitter/MessageFilters.java"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52251.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52251"},{"type":"REPORT","url":"https://github.com/github/advisory-database/issues/9400"},{"type":"REPORT","url":"https://github.com/google/osv.dev/issues/5988"},{"type":"FIX","url":"https://github.com/kafbat/kafka-ui/commit/11a57d14"},{"type":"PACKAGE","url":"https://github.com/BobTheShoplifter/CVE-2023-52251-POC"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/kafbat/kafka-ui","events":[{"introduced":"0"},{"fixed":"11a57d14"}],"database_specific":{"source":"REFERENCES"}},{"type":"GIT","repo":"https://github.com/provectus/kafka-ui","events":[{"introduced":"521ba0cb2f63110eb2ed13a7054a4d70238a862a"},{"fixed":"83b5a60cc08501b570a0c4d0b4cdfceb1b88d6b7"}],"database_specific":{"cpe":"cpe:2.3:a:provectus:ui:*:*:*:*:*:kafka:*:*","extracted_events":[{"introduced":"0.4.0"},{"fixed":"0.7.2"},{"last_affected":"0.7.1"}],"source":["DESCRIPTION","CPE_RANGE"]}}],"versions":["v0.7.0","charts/kafka-ui-0.7.1","charts/kafka-ui-0.7.0","charts/kafka-ui-0.6.2","v0.6.1","charts/kafka-ui-0.6.1","charts/kafka-ui-0.6.0","v0.6.0","charts/kafka-ui-0.5.4","charts/kafka-ui-0.5.3","charts/kafka-ui-0.5.2","charts/kafka-ui-0.5.1","charts/kafka-ui-0.5.0","v0.5.0","charts/kafka-ui-0.4.6","charts/kafka-ui-0.4.5","charts/kafka-ui-0.4.4","v0.4.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52251.json","vanir_signatures_modified":"2026-09-10T08:24:36Z","vanir_signatures":[{"target":{"file":"kafka-ui-api/src/main/java/com/provectus/kafka/ui/service/rbac/AccessControlService.java"},"deprecated":false,"digest":{"line_hashes":["62007567010970546235478780467727966245","658649790850733764416141744021900135","145899299015710454944174862182482204582","80861459889019897143030131364301450292"],"threshold":0.9},"id":"CVE-2023-52251-18c176a4","signature_type":"Line","signature_version":"v1","source":"https://github.com/provectus/kafka-ui/commit/83b5a60cc08501b570a0c4d0b4cdfceb1b88d6b7"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/provectus/kafka-ui/commit/83b5a60cc08501b570a0c4d0b4cdfceb1b88d6b7","target":{"file":"kafka-ui-api/src/main/java/com/provectus/kafka/ui/service/integration/odd/ConnectorInfo.java"},"deprecated":false,"digest":{"line_hashes":["250312686429093291031435467632698538944","93855993101803139676579833440481216108","51523706843299968019364735395578489412","102549781323801937745974596021876464356"],"threshold":0.9},"id":"CVE-2023-52251-616b9e82"},{"deprecated":false,"digest":{"line_hashes":["329640311325796463209809622694657573813","317847512637555967637047391389602323979","238356787583289391875245138073580830934","215238189346481585779338497430230323908"],"threshold":0.9},"id":"CVE-2023-52251-90890a2c","signature_type":"Line","signature_version":"v1","source":"https://github.com/provectus/kafka-ui/commit/83b5a60cc08501b570a0c4d0b4cdfceb1b88d6b7","target":{"file":"kafka-ui-api/src/main/java/com/provectus/kafka/ui/model/rbac/Permission.java"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}