Rocketmq (Apache) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 30 known versions, newest CVE from 2024-07-22. Vendor: Apache.

CVEs of Rocketmq

• CVE-2024-23321 - CVSS 8.8 (high), 2024-07-22: For RocketMQ versions 5.2.0 and below, under certain conditions, there is a risk of exposure of sensitive Information to an unauthorized actor even if…
• CVE-2023-37582 - CVSS 9.8 (critical), 2023-07-12: The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1.…
• CVE-2023-33246 - CVSS 9.8 (critical), 2023-05-24: For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution.  Several components of RocketMQ, including…
• CVE-2019-17572 - CVSS 5.3 (medium), 2020-05-14: In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent…