Skip to content
OpenAdvisories

Package · Maven

org.apache.rocketmq:rocketmq-broker

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2019-17572 Public exploit

    Directory traversal in Apache RocketMQ

    In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in broker…

    org.apache.rocketmq:rocketmq-broker Maven