Description
In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | Spring AMQP Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7 | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2022-5412 | In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack. |
 Github GHSA |
GHSA-vqqg-xgv7-cf68 | Deserialization of Untrusted Data in Spring AMQP |
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: dell
Published:
Updated: 2024-08-05T16:19:29.514Z
Reserved: 2017-04-21T00:00:00.000Z
Link: CVE-2017-8045
Vulnrichment
No data.
NVD
Status : Deferred
Published: 2017-11-27T10:29:00.907
Modified: 2025-04-20T01:37:25.860
Link: CVE-2017-8045
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses