Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2018-1288

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-gh27-38p5-mrxc

Improper Control of Generation of Code in Apache Kafka In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss.

gitlab/maven/org.apache.kafka/kafka/CVE-2018-1288

Information Exposure In Apache Kafka authenticated users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss.