Skip to content

Product

org.apache.eventmesh/eventmesh-runtime vulnerabilities

1 published CVE affecting org.apache.eventmesh/eventmesh-runtime, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest org.apache.eventmesh/eventmesh-runtime CVEs

Newest publication first

  1. CVE-2024-39954 Apache EventMesh Runtime: SSRF

    Published
    MediumCVSS 6.3 EPSS 0.44%

    CWE-918 Server-Side Request Forgery (SSRF) in eventmesh-runtime module in WebhookUtil.java on windows\linux\mac os e.g. allows the attacker can abuse functionality on the server to read or update internal resources. Users are recommended to upgrade to version 1.12.0 or use the ma...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.