Remote Code Execution (RCE)

2023-05-2502:04:34

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

rocketmq

remote code execution

vulnerability

configuration path

injection

malicious code

protocol content

information leakage

extranet

0.973 High

EPSS

Percentile

99.9%

JSON

RocketMQ is vulnerable to Remote Code Execution (RCE). The vulnerability exists because the library allows updating the config path at runtime, allowing an attacker to inject and execute malicious code through the update configuration function by forging the RocketMQ protocol content, which also leads to information leakage in the extranet.

CPENameOperatorVersion
rocketmq-brokerle4.9.5
rocketmq-brokerle5.1.0
rocketmq-namesrvle4.9.5
rocketmq-namesrvle5.1.0
rocketmq-controllerle5.1.0
rocketmq-brokerle4.9.5
rocketmq-brokerle5.1.0
rocketmq-namesrvle4.9.5
rocketmq-namesrvle5.1.0
rocketmq-controllerle5.1.0

Name	Operator	Version
rocketmq-broker	le	4.9.5
rocketmq-broker	le	5.1.0
rocketmq-namesrv	le	4.9.5
rocketmq-namesrv	le	5.1.0
rocketmq-controller	le	5.1.0
rocketmq-broker	le	4.9.5
rocketmq-broker	le	5.1.0
rocketmq-namesrv	le	4.9.5
rocketmq-namesrv	le	5.1.0
rocketmq-controller	le	5.1.0