CVE-2017-8045
N/A
N/A
Summary
In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | Spring AMQP Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7 | Spring AMQP Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7 | affected |
Weaknesses
- Remote code execution
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.