Lucene search
China National Vulnerability DatabaseCNVD-2023-42971HistoryMay 28, 2023 - 12:00 a.m.
Apache RocketMQ Command Execution Vulnerability
2023-05-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
apache rocketmq
command execution
vulnerability
data processing platform
messaging engine
configuration function
system user
0.973 High
EPSS
Percentile
99.9%
Apache RocketMQ is the United States Apache (Apache) Foundation of a lightweight data processing platform and messaging engine. A command execution vulnerability exists in Apache RocketMQ 5.1.0 and prior versions, which stems from an application failing to properly filter special elements of constructed snippets. An attacker can exploit the vulnerability to update the configuration function to execute commands as the system user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache rocketmq | le | 5.1.0 |
Related
prion
prion
Design/Logic Flaw
2023-05-24 15:15:00
Design/Logic Flaw
2023-07-12 10:15:00
cisa_kev
cisa_kev
Apache RocketMQ Command Execution Vulnerability
2023-09-06 00:00:00
hivepro
hivepro
Attacks, Vulnerabilities and Actors 4 September to 10 September 2023
2023-09-12 05:39:44
DreamBus Botnet Exploiting A Critical Vulnerability in Apache RocketMQ
2023-09-07 13:30:03
nvd
nvd
CVE-2023-33246
2023-05-24 15:15:09
CVE-2023-37582
2023-07-12 10:15:11
packetstorm
packetstorm
Apache RocketMQ 5.1.0 Arbitrary Code Injection
2023-07-07 00:00:00
metasploit
metasploit
Apache RocketMQ update config RCE
2023-07-05 16:38:51
Apache RocketMQ Version Scanner
2023-06-07 21:29:53
thn
thn
attackerkb
attackerkb
CVE-2023-33246
2023-05-24 00:00:00
osv
osv
Apache RocketMQ may have remote code execution vulnerability when using update configuration function
2023-07-06 21:15:04
CVE-2023-33246
2023-05-24 15:15:09
RocketMQ NameServer component Code Injection vulnerability
2023-07-12 12:31:36
zdt
zdt
Apache RocketMQ 5.1.0 Arbitrary Code Injection Exploit
2023-07-10 00:00:00
githubexploit
githubexploit
Exploit for Code Injection in Apache Rocketmq
2023-06-06 11:24:40
Exploit for Code Injection in Apache Rocketmq
2023-06-07 01:01:26
Exploit for Code Injection in Apache Rocketmq
2023-06-13 04:01:11
cvelist
cvelist
cve
cve
CVE-2023-33246
2023-05-24 15:15:09
CVE-2023-37582
2023-07-12 10:15:11
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-07-07 19:26:23
veracode
veracode
Remote Code Execution (RCE)
2023-05-25 02:04:34
Arbitrary Code Injection
2023-07-21 10:22:11
ibm
ibm
github
github
nessus
nessus
Apache RocketMQ < 4.9.7 / 5.x < 5.1.2 RCE (CVE-2023-37582)
2023-11-10 00:00:00