Lucene search
GoogleOSV:GHSA-F38P-MQ64-H784HistoryMay 14, 2022 - 2:46 a.m.
Improper Input Validation in Apache Qpid AMQP 0-x JMS
2022-05-1402:46:14
Google
osv.dev
10
apache
qpid
amqp
input validation
jms
remote code execution
EPSS
0.011
Percentile
84.2%
Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS (AMQP 1.0) before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and execute arbitrary code by leveraging a crafted serialized object in a JMS ObjectMessage that is handled by the getObject function.
Related
cve
cve
CVE-2016-4974
2016-07-13 15:59:04
prion
prion
Design/Logic Flaw
2016-07-13 15:59:00
redhatcve
redhatcve
CVE-2016-4974
2016-07-04 09:23:19
nvd
nvd
CVE-2016-4974
2016-07-13 15:59:04
ubuntucve
ubuntucve
CVE-2016-4974
2016-07-13 00:00:00
cvelist
cvelist
CVE-2016-4974
2016-07-13 15:00:00
github
github
Improper Input Validation in Apache Qpid AMQP 0-x JMS
2022-05-14 02:46:14