Aller au contenu
Non notée

CVE-2017-8045 In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be…

Description

In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack.

Produits et versions touchés

Produit Versions touchées Corrigé en
Spring AMQP Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7 Versions non publiées
Suivre cette CVE