Threats Tagged 'ghsa-8c8p-h27x-rrc9'

CMAK versions up to 3.0.0.6 have a protection mechanism failure where the scheduled leader election feature toggle is not applied to HTML form routes. This allows attackers with limited privileges to access form endpoints that control the recurring election scheduler, potentially disrupting leadership in managed Kafka clusters. The vulnerability has a medium severity score of 5.3 and does not have known exploits in the wild. No patch or official fix information is provided in the available data.