CVE-2026-44367

Katalog CVE

CVSS 2.7 · Low EPSS 0,40%

Kerentanan Improper Input Validation. Skor CVSS 3.1 2.7 (Low) menurut github.com.

Deskripsi (NVD)

Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, a vulnerability exists in the user registration and login mechanisms due to inconsistent handling of username case sensitivity, leading to a targeted Denial of Service (DoS) and complete account lockout. This issue has been patched in version 2.10.4.

Rincian

Terbit di NVD

2 Juni 2026

Terakhir diubah

22 Juli 2026

Status NVD

Deferred

CVSS 3.1

2.7 (Low), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation
CWE-178: Improper Handling of Case Sensitivity

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,3% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/Aiven-Open/klaw/releases/tag/v2.10.4
• https://github.com/Aiven-Open/klaw/security/advisories/GHSA-75rx-m9vh-mm9p