Arbitrary Code Execution

rabbitmq-jms is vulnerable to arbitrary code execution. Untrusted objects are not filtered and passed through StreamMessage in the JMS to be deserialized before or while being given to the message listeners. An authenticated user is able to abuse the vulnerability to execute arbitrary code on the...