Description
DeadLetterPublishingRecovererFactory reads the retry_topic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new BigInteger(header.value()) with no length or format validation. Spring for Apache Kafka 4.1.0 Spring for Apache Kafka 4.0.0 - 4.0.6 Spring for Apache Kafka 3.0.0 - 3.3.16 Spring for Apache Kafka 2.9.0 - 2.9.14 Spring for Apache Kafka 2.8.12 and earlier
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- Spring / Spring for Apache Kafka4.1.0 – 4.1.0
- Spring / Spring for Apache Kafka4.0.0 – 4.0.6
- Spring / Spring for Apache Kafka3.0.0 – 3.3.16
- Spring / Spring for Apache Kafka2.9.0 – 2.9.14
- Spring / Spring for Apache Kafka0 – 2.8.12
- VMware / spring_for_apache_kafka2.8.12
References
Updated 20m ago · 8 sources