CVE-2023-31826

CVSS 7.8 HIGHEPSS 0.3%CWE-862

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.8EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

23 may 2023Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attackers to execute arbitrary commands via supplying crafted data.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

n/a · n/a

Referencias

http://nevado.skyscreamer.org/https://github.com/skyscreamer/nevado/issues/121 https://github.com/skyscreamer/nevado/releases https://novysodope.github.io/2023/04/01/95/