CVE-2020-17520: Apache Pulsar Manager

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

In the Pulsar manager 0.1.0 version, malicious users will be able to bypass pulsar-manager's admin, permission verification mechanism by constructing special URLs, thereby accessing any HTTP API.

Affected products

• Apache Pulsar Manager: version 0.1.0 only

Published 2020-12-18. Last modified 2026-06-17.