org.apache.rocketmq:rocketmq-namesrv

2 results · Clear filters · Feed

• Critical 9.8
  CVE-2023-37582 Public exploit Scanner template EPSS 90%

  Apache RocketMQ: Possible remote code execution when using the update configuration function

  The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1. When NameServer address are leaked on the extranet and lack permission verification, an attacker can ex…

  Apache Software Foundation Apache RocketMQ org.apache.rocketmq:rocketmq-namesrv Maven
  Jul 12, 2023
• Critical 9.8
  CVE-2023-33246 Exploited Public exploit Scanner template EPSS 97%

  Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

  For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution.  Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attack…

  Apache Software Foundation Apache RocketMQ org.apache.rocketmq:rocketmq-broker org.apache.rocketmq:rocketmq-namesrv Maven
  May 24, 2023

  KEV Sep 6, 2023