Apache Software Foundation Apache RocketMQ vulnerabilities (CVE)

CVE records published for Apache Software Foundation Apache RocketMQ, newest first. Follow to get an email when a new one appears.

1 results

9.8Critical

CVE-2023-33246 KEV 3 years ago

Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

Apache Software Foundation Apache RocketMQ

For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution. Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attac…

97%EPSS