Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-60536 1 Provectus 1 Kafka-ui 2025-10-23 7.5 High
An issue in the Configure New Cluster interface of kafka-ui v0.6.0 to v0.7.2 allows attackers to cause a Denial of Service (DoS) via uploading a crafted configuration file.
CVE-2025-60537 1 Provectus 1 Kafka-ui 2025-10-23 6.5 Medium
Improper input validation in the component /kafka/ui/serdes/CustomSerdeLoader.java of kafka-ui v0.6.0 to v0.7.2 allows attackers to execute arbitrary code via supplying crafted data.