[ { "id": 685049637, "name": "Spring-Kafka-POC-CVE-2023-34040", "full_name": "Contrast-Security-OSS\/Spring-Kafka-POC-CVE-2023-34040", "owner": { "login": "Contrast-Security-OSS", "id": 5577345, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5577345?v=4", "html_url": "https:\/\/github.com\/Contrast-Security-OSS", "user_view_type": "public" }, "html_url": "https:\/\/github.com\/Contrast-Security-OSS\/Spring-Kafka-POC-CVE-2023-34040", "description": "POC for Spring Kafka Deserialization Vulnerability CVE-2023-34040", "fork": false, "created_at": "2023-08-30T12:09:15Z", "updated_at": "2024-11-09T01:58:03Z", "pushed_at": "2023-08-30T12:18:35Z", "stargazers_count": 44, "watchers_count": 44, "has_discussions": false, "forks_count": 6, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, "topics": [], "visibility": "public", "forks": 6, "watchers": 44, "score": 0, "subscribers_count": 3 }, { "id": 697735132, "name": "CVE-2023-34040", "full_name": "pyn3rd\/CVE-2023-34040", "owner": { "login": "pyn3rd", "id": 41412951, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41412951?v=4", "html_url": "https:\/\/github.com\/pyn3rd", "user_view_type": "public" }, "html_url": "https:\/\/github.com\/pyn3rd\/CVE-2023-34040", "description": "Spring-Kafka-Deserialization-Remote-Code-Execution", "fork": false, "created_at": "2023-09-28T11:18:35Z", "updated_at": "2024-05-09T02:46:17Z", "pushed_at": "2023-10-08T06:14:09Z", "stargazers_count": 30, "watchers_count": 30, "has_discussions": false, "forks_count": 8, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, "topics": [], "visibility": "public", "forks": 8, "watchers": 30, "score": 0, "subscribers_count": 1 }, { "id": 791078025, "name": "CVE-2023-34040", "full_name": "buiduchoang24\/CVE-2023-34040", "owner": { "login": "buiduchoang24", "id": 166605385, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/166605385?v=4", "html_url": "https:\/\/github.com\/buiduchoang24", "user_view_type": "public" }, "html_url": "https:\/\/github.com\/buiduchoang24\/CVE-2023-34040", "description": "In Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector existed, but only if unusual configuration was applied. An attacker would have to construct a malicious serialized object in one of the deserialization exception record headers. Cre: NVD", "fork": false, "created_at": "2024-04-24T03:54:16Z", "updated_at": "2024-04-24T04:04:00Z", "pushed_at": "2024-04-24T04:02:30Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, "forks_count": 0, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, "topics": [], "visibility": "public", "forks": 0, "watchers": 0, "score": 0, "subscribers_count": 1 }, { "id": 806650830, "name": "cve-2023-34040", "full_name": "huyennhat-dev\/cve-2023-34040", "owner": { "login": "huyennhat-dev", "id": 83244882, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83244882?v=4", "html_url": "https:\/\/github.com\/huyennhat-dev", "user_view_type": "public" }, "html_url": "https:\/\/github.com\/huyennhat-dev\/cve-2023-34040", "description": null, "fork": false, "created_at": "2024-05-27T15:57:03Z", "updated_at": "2024-05-27T15:57:43Z", "pushed_at": "2024-05-27T15:57:40Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, "forks_count": 0, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, "topics": [], "visibility": "public", "forks": 0, "watchers": 0, "score": 0, "subscribers_count": 1 } ]