Product · Apache Software Foundation

Apache RocketMQ

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2023-33246 Exploited Public exploit EPSS 97%

Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution. Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attack…

Apache Software Foundation Apache RocketMQ org.apache.rocketmq:rocketmq-namesrv org.apache.rocketmq:rocketmq-broker Maven

May 24, 2023
KEV Sep 6, 2023