CVE

CVE-2023-52251

8.8

CVSShigh

Exploitable remotely over the internet · low-privilege account sufficient.

Description

An issue discovered in provectus kafka-ui 0.4.0 through 0.7.2 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/{topic}/messages. No fixed release is available; the project has had no commit since 2024-04-08.

Attack Vector

Network

Privileges Req.

Low

User Interaction

None

Updated Sep 18, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

CVE-2023-52251 Scanner

CVE-2023-52251 Scanner - Command Injection vulnerability in Kafka UI

Used 2.6k times · 5.9k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →