PT-2025-42164

CVE-2025-60536

·

Published

2025-10-14

·

Updated

2025-10-16

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions kafka-ui versions 0.6.0 through 0.7.2
Description An issue in the Configure New Cluster interface allows attackers to cause a Denial of Service (DoS) by uploading a crafted configuration file.
Recommendations Update to a version later than 0.7.2.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-400: Uncontrolled Resource Consumption
Related identifiers
CVE-2025-60536
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com