Podatność CVE-2023-46604

Podatność CVE-2023-46604

Publikacja: 2023-10-27

Opis:

Apache ActiveMQ is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker with network access to a broker to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.

Users are recommended to upgrade to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3, which fixes this issue.

W naszej bazie, znaleźliśmy następujące noty dla tego CVE:

	Tytuł	Autor	Data
Med.	OX App Suite 7.10.6 Cross Site Scripting / Deserialization Issue	Martin Heiland	11.04.2024

Typ:

CWE-502

(Deserialization of Untrusted Data)

Referencje:

https://activemq.apache.org/security-advisories.data/CVE-2023-46604-announcement.txt

Copyright 2024, cxsecurity.com