Lucene search
Veracode Vulnerability DatabaseVERACODE:25437HistoryMay 15, 2020 - 5:01 a.m.
Directory Traversal
2020-05-1505:01:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
0.001 Low
EPSS
Percentile
25.0%
rocketmq-broker is vulnerable to directory traversal. The automatic topic creation which is enabled by default, allows a folder name containing ../ characters to be created. This results in the writing of arbitrary directory in the parent directories, potentially overwriting existing folders.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rocketmq-broker | le | 4.6.0 |
Related
cve
cve
CVE-2019-17572
2020-05-14 17:15:11
prion
prion
Directory traversal
2020-05-14 17:15:00
github
github
Directory traversal in Apache RocketMQ
2020-07-01 17:26:15
osv
osv
CVE-2019-17572
2020-05-14 17:15:11
Directory traversal in Apache RocketMQ
2020-07-01 17:26:15
cvelist
cvelist
CVE-2019-17572
2020-05-14 16:10:48
nvd
nvd
CVE-2019-17572
2020-05-14 17:15:11
nessus
nessus
Apache RocketMQ 4.2.0 < 4.6.1 Directory Traversal (CVE-2023-37582)
2023-11-10 00:00:00