Skip to content

Product

org.apache.rocketmq/rocketmq-controller vulnerabilities

1 published CVE affecting org.apache.rocketmq/rocketmq-controller, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
1

Latest org.apache.rocketmq/rocketmq-controller CVEs

Newest publication first

  1. CVE-2023-33246 Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

    Published
    CriticalCVSS 9.8 EPSS 96.6% CISA KEV added 2023-09-06 Exploited in the wild Framework module Public exploit PoC

    For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution. Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attacker can exploit this vu...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.