Package · Maven

org.apache.eventmesh:eventmesh-connector-rabbitmq

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.8

CVE-2023-26512

Apache EventMesh RabbitMQ-Connector plugin allows RCE through deserialization of untrusted data

CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh (incubating) V1.7.0\V1.8.0 on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via rabbitmq messages. …

Apache Software Foundation Apache EventMesh (incubating) RabbitMQ connector org.apache.eventmesh:eventmesh-connector-rabbitmq Maven

Jul 17, 2023