UI vulnerabilities

3 known vulnerabilities in UI from Provectus. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  kafka-ui: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-5562Apr 5, 2026ProvectusEPSS 2.58%

  A vulnerability was identified in provectus kafka-ui up to 0.7.2. This impacts the function validateAccess of the file /api/smartfilters/testexecutions of the component Endpoint. The manipulation leads to code injection. The attack can be initiated remotely. T

• 8.1 High severity

  kafka-ui: Improper Control of Generation of Code

  CVE-2024-32030Jun 19, 2024ProvectusEPSS 51.1%

  Kafka UI is an Open-Source Web UI for Apache Kafka Management. Kafka UI API allows users to connect to different Kafka brokers by specifying their network address and port. As a separate feature, it also provides the ability to monitor the performance of Kafka

• 8.8 High severity

  UI: Improper Control of Generation of Code

  CVE-2023-52251Jan 25, 2024ProvectusEPSS 86.8%

  An issue discovered in provectus kafka-ui 0.4.0 through 0.7.2 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/{topic}/messages. No fixed release is available; the project has had no commit since 2024-04-08.