1 matches found
GHSA-GPQ8-963W-8QC9 RocketMQ NameServer component Code Injection vulnerability
The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1. When NameServer address are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the...
9.8CVSS6.2AI score0.90427EPSS
SaveExploits2References4
20