Threats tagged 'ghsa-pvjw-82p3-hmj7'

An authenticated Kafka principal without any authorization grants can exploit a flaw in broker configuration validation to read files or environment variables from the broker host. This occurs because configuration validation resolves variables before authorization checks, bypassing existing allowlists. The vulnerability allows disclosure of sensitive broker-hosted files and environment variables, potentially exposing secrets. The issue is fixed in Apache Kafka versions 4.2.2, 4.3.2, and 4.4.0 by enforcing authorization before validation and restricting config-provider usage.