Lucene search
Veracode Vulnerability DatabaseVERACODE:5148HistorySep 21, 2017 - 2:37 a.m.
Remote Code Execution (RCE)
2017-09-2102:37:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.064 Low
EPSS
Percentile
93.7%
spring-amqp is vulnerable to remote code execution (RCE) attacks. A malicious user can pass a org.springframework.amqp.core.Message object containing arbitrary code that is executed when deserialized by the application.
| CPE | Name | Operator | Version |
|---|---|---|---|
| spring amqp core | le | 1.6.10.RELEASE | |
| spring amqp core | le | 1.5.6.RELEASE | |
| spring amqp core | le | 1.7.3.RELEASE |
Related
github
github
Deserialization of Untrusted Data in Spring AMQP
2022-05-17 00:16:13
cvelist
cvelist
CVE-2017-8045
2017-11-27 10:00:00
nvd
nvd
CVE-2017-8045
2017-11-27 10:29:00
osv
osv
CVE-2017-8045
2017-11-27 10:29:00
Deserialization of Untrusted Data in Spring AMQP
2022-05-17 00:16:13
cve
cve
CVE-2017-8045
2017-11-27 10:29:00
prion
prion
Remote code execution
2017-11-27 10:29:00