Product · Apache Software Foundation

Apache RocketMQ

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2023-37582 Public exploit EPSS 90%

Apache RocketMQ: Possible remote code execution when using the update configuration function

The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1. When NameServer address are leaked on the extranet and lack permission verification, an attacker can ex…

Apache Software Foundation Apache RocketMQ org.apache.rocketmq:rocketmq-namesrv Maven

Jul 12, 2023
Critical 9.8

CVE-2023-33246 Exploited Public exploit EPSS 97%

Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution. Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attack…

Apache Software Foundation Apache RocketMQ org.apache.rocketmq:rocketmq-broker org.apache.rocketmq:rocketmq-namesrv Maven

May 24, 2023
KEV Sep 6, 2023