Lucene search
+L

10 matches found

osv_ghsa
osv_ghsa
•added 2021/12/10 5:15 p.m.•71 views

GHSA-V525-C3G5-CG9P Unsafe Deserialization that can Result in Code Execution

JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution via crafted StreamMessage data...

9.8CVSS9.7AI score0.02844EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2021/12/10 5:15 p.m.•69 views

Unsafe Deserialization that can Result in Code Execution

JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution via crafted StreamMessage data...

9.8CVSS9.3AI score0.02844EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2021/03/15 4:18 a.m.•34 views

Arbitrary Code Execution

rabbitmq-jms is vulnerable to arbitrary code execution. Untrusted objects are not filtered and passed through StreamMessage in the JMS to be deserialized before or while being given to the message listeners. An authenticated user is able to abuse the vulnerability to execute arbitrary code on the...

9.8CVSS5.3AI score0.02844EPSS
SaveExploits0References5Affected Software1
osv_cve
osv_cve
•added 2021/03/12 1:15 a.m.•26 views

CVE-2020-36282

JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution via crafted StreamMessage data...

9.8CVSS7.4AI score0.02844EPSS
SaveExploits0References4
NVD
NVD
•added 2021/03/12 1:15 a.m.•30 views

CVE-2020-36282

JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution via crafted StreamMessage data...

9.8CVSS0.02844EPSS
SaveExploits0References4
Prion
Prion
•added 2021/03/12 1:15 a.m.•32 views

Deserialization of untrusted data

JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution via crafted StreamMessage data...

7.5CVSS9.6AI score0.02844EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2021/03/12 12:27 a.m.•8 views

CVE-2020-36282

JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution via crafted StreamMessage data...

9.8CVSS0.02844EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2021/03/12 12:00 a.m.•6 views

PT-2021-11990

Name of the Vulnerable Software and Affected Versions: JMS Client for RabbitMQ versions 1.x through 1.15.1 JMS Client for RabbitMQ versions 2.x through 2.1.x Description: The issue is related to unsafe deserialization, which can result in code execution via crafted StreamMessage data...

9.8CVSS0.02844EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/12 12:00 a.m.•9 views

CVE-2020-36282: Deserialization of Untrusted Data

JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution via crafted StreamMessage data...

9.8CVSS6AI score0.02844EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/03/11 12:00 a.m.•24 views

Pivotal Software RabbitMQ code-related vulnerabilities

Pivotal Software RabbitMQ is a suite of open source message broker software from Pivotal Software, USA that implements the Advanced Message Queuing Protocol AMQP. A code issue vulnerability exists in JMS Client on RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0, which stems from vulnerability to...

9.8CVSS8.8AI score0.02844EPSS
SaveExploits0References9
Rows per page
Query Builder