Skip to content

Vulnerabilities of Apache Software Foundation Apache Pulsar

Is your version affected?

CVE Summary Score Published
CVE-2022-33682 TLS hostname verification cannot be enabled in the Pulsar Broker's Java Client, the Pulsar Broker's Java Admin Client,… Not rated Sep 23, 2022
CVE-2022-33681 Delayed TLS hostname verification in the Pulsar Java Client and the Pulsar Proxy make each client vulnerable to a man in… Not rated Sep 23, 2022
CVE-2022-24280 Improper Input Validation vulnerability in Proxy component of Apache Pulsar allows an attacker to make TCP/IP connection… Not rated Sep 23, 2022
CVE-2021-41571 In Apache Pulsar it is possible to access data from BookKeeper that does not belong to the topics accessible by the… Not rated Feb 1, 2022
CVE-2021-22160 If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens (JWT), the signature of the… Not rated May 26, 2021

Other Apache Software Foundation products