Product · Apache Software Foundation

Apache EventMesh

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2024-56180

Apache EventMesh: raft Hessian Deserialization Vulnerability allowing remote code execution

CWE-502 Deserialization of Untrusted Data at the eventmesh-meta-raft plugin module in Apache EventMesh master branch without release version on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via hessian…

Apache Software Foundation Apache EventMesh org.apache.eventmesh:eventmesh-meta-raft Maven

Feb 14, 2025