CVE-2023-31826

Summary

Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attackers to execute arbitrary commands via supplying crafted data.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://nevado.skyscreamer.org/
• https://github.com/skyscreamer/nevado/releases
• https://novysodope.github.io/2023/04/01/95/
• https://github.com/skyscreamer/nevado/issues/121

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• http://nevado.skyscreamer.org/
• https://github.com/skyscreamer/nevado/releases
• https://novysodope.github.io/2023/04/01/95/
• https://github.com/skyscreamer/nevado/issues/121

• ←Previous
• Next→