Lucene search

CVE-2023-33246

🗓️ 24 May 2023 00:00:00Reported by AttackerKBType

RocketMQ versions 5.1.0 and below have remote command execution risk caused by leaked components on the extranet without permission verification, allowing attackers to execute commands or forge protocol content

Reporter	Title	Published	Views	Family All 50
OSV	Apache RocketMQ may have remote code execution vulnerability when using update configuration function	6 Jul 202321:15	–	osv
OSV	CVE-2023-33246	24 May 202315:15	–	osv
OSV	RocketMQ NameServer component Code Injection vulnerability	12 Jul 202312:31	–	osv
OSV	CVE-2023-37582	12 Jul 202310:15	–	osv
The Hacker News	Muhstik Botnet Exploiting Apache RocketMQ Flaw to Expand DDoS Attacks	6 Jun 202413:14	–	thn
The Hacker News	Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New Exploits	30 Aug 202311:15	–	thn
CNVD	Apache RocketMQ Command Execution Vulnerability	28 May 202300:00	–	cnvd
0day.today	Apache RocketMQ 5.1.0 Arbitrary Code Injection Exploit	10 Jul 202300:00	–	zdt
GithubExploit	Exploit for Code Injection in Apache Rocketmq	6 Jun 202311:24	–	githubexploit
GithubExploit	Exploit for Code Injection in Apache Rocketmq	13 Jun 202304:01	–	githubexploit

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
cisa	www.cisa.gov/news-events/cybersecurity-advisories/aa24-207a
github	www.github.com/Le1a/CVE-2023-33246
github	www.github.com/SuperZero/CVE-2023-33246
lists	www.lists.apache.org/thread/1s8j2c8kogthtpv3060yddk03zq0pxyp
packetstormsecurity	www.packetstormsecurity.com/files/173339/Apache-RocketMQ-5.1.0-Arbitrary-Code-Injection.html
openwall	www.openwall.com/lists/oss-security/2023/07/12/1
vulncheck	www.vulncheck.com/blog/rocketmq-exploit-payloads

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 May 2023 00:00Current

9.9High risk

Vulners AI Score9.9

CVSS39.8

EPSS0.97262