Not rated
CVE-2017-8045 In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be…
Description
In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spring AMQP Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7 | Versions not published |