Skip to content
OpenAdvisories

Archive

14 May 2020

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium —
    CVE-2019-17572 Public exploit

    Directory traversal in Apache RocketMQ

    In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in broker…