CVE-2020-36282

CVE-2020-36282

EPSS 2.8%

JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution via crafted StreamMessage data.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://github.com/rabbitmq/rabbitmq-jms-client/issues/135 https://github.com/rabbitmq/rabbitmq-jms-client/releases/tag/v1.15.2 https://github.com/rabbitmq/rabbitmq-jms-client/releases/tag/v2.2.0 https://medium.com/%40ramon93i7/a99645d0448b