CVE-2023-33246 CISA KEV · Actively exploited
rocketmq: Apache RocketMQ Arbitrary Code Injection
CVSS score
9.8
EPSS probability
%96.6
Risk score
18.9
Published
3 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
shoucheng3/apache__rocketmq_CVE-2023-33246_5-1-0
Makefile Go / Python
GitHub
A go-exploit for fetching the RocketMQ broker configuration in order to discover indicators of compromise for CVE-2023-33246
Makefile Go / Python
Sumitpathania03/Apache-RocketMQ-CVE-2023-33246-
Makefile Go / Python
MkJos/CVE-2023-33246_RocketMQ_RCE_EXP
Makefile Go / Python
CVE-2023-33246 RocketMQ RCE Detect By Version and Exploit
Makefile Go / Python
Nuclei: RocketMQ <= 5.1.0 - Remote Code Execution
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2021-44228 Actively exploited
Improper input validation in Apache Log4j
S
Patch verified Public Exploits:22EPSS %100
9.8
CVE-2017-5638 Actively exploited
struts2: RCE when performing file upload based on Jakarta Multipart parser
A
Workaround Public Exploits:10EPSS %100
9.8
CVE-2018-11776 Actively exploited
struts2: Using specific results and namespaces can result in a remote code execution
A
Workaround Public Exploits:14EPSS %100
9.8
CVE-2023-46604 Actively exploited
activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
RH
Partial patch Public Exploits:1EPSS %100
9.8
CVE-2020-1938 Actively exploited
Vulnerability in Apache Tomcat
A
Patch verified Public Exploits:12EPSS %99
9.8
CVE-2018-1273 Actively exploited
Code injection in Spring By Pivotal Spring Framework
SB
Patch verified Public Exploits:8EPSS %97
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-33246"