de.dentrassi.kura.amqp:de.dentrassi.kura.camel.amqp.runtime (0.0.2), net.smolok:smolok-bootstrap (>=0.0.0, <=0.0.11) +16 more potentially affected by CVE-2016-4974 via org.apache.qpid:qpid-jms-client (>=0.1.0, <=0.9.0)

org.apache.qpid:qpid-jms-client MAVEN version =0.1.0, =0.0.0, =0.0.0, =0.0.6, =0.0.0, =0.0.0, =0.0.6, =0.0.0, =0.0.3, =0.0.4, =0.0.0, =0.0.0, =1.1.0, =1.2.0, =1.4.0 and more Source cves: CVE-2016-4974 Source advisory: GHSA-F38P-MQ64-H784...

de.dentrassi.kura.amqp:de.dentrassi.kura.camel.amqp.runtime (0.0.2), net.smolok:smolok-bootstrap (>=0.0.0, <=0.0.11) +16 more potentially affected by CVE-2016-4974 via org.apache.qpid:qpid-jms-client (>=0.1.0, <=0.9.0)

org.apache.qpid:qpid-jms-client MAVEN version =0.1.0, =0.0.0, =0.0.0, =0.0.6, =0.0.0, =0.0.0, =0.0.6, =0.0.0, =0.0.3, =0.0.4, =0.0.0, =0.0.0, =1.1.0, =1.2.0, =1.4.0 and more Source cves: CVE-2016-4974 Source advisory: OSV:GHSA-F38P-MQ64-H784...

de.dentrassi.kura.amqp:de.dentrassi.kura.camel.amqp.runtime (0.0.2), net.smolok:smolok-bootstrap (>=0.0.0, <=0.0.11) +16 more potentially affected by CVE-2016-4974 via org.apache.qpid:qpid-jms-client (>=0.1.0, <=0.9.0)

org.apache.qpid:qpid-jms-client MAVEN version =0.1.0, =0.0.0, =0.0.0, =0.0.6, =0.0.0, =0.0.0, =0.0.6, =0.0.0, =0.0.3, =0.0.4, =0.0.0, =0.0.0, =1.1.0, =1.2.0, =1.4.0 and more Source cves: CVE-2016-4974 Source advisory: MEND:CVE-2016-4974...

CVE-2016-4974

Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS AMQP 1.0 before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and execute arbitrary code by leveraging a...