Description
(CVE-2025-27817) Apache Kafka Client任意文件读取和SSRF漏洞
(CVE-2025-27817) Apache Kafka Client任意文件读取和SSRF漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-27817
https://kafka.apache.org/community/cve-list/
https://nsfocusglobal.com/apache-kafka-arbitrary-file-read-and-ssrf-vulnerability-cve-2025-27817/
https://github.com/advisories/GHSA-vgq5-3255-v292
https://support.confluent.io/hc/en-us/articles/39740309244180-CONFSA-2025-04-CVE-2025-27817-Confluent-Platform-and-Confluent-Cloud-Arbitrary-File-Read-and-Server-Side-Request-Forgery-SSRF-Vulnerability-via-unauthorized-changes-to-Kafka-Client-SASL-OAUTHBEARER-configuration
https://access.redhat.com/errata/RHSA-2025:9922