Approved changes feed: RSS · Atom

cpe:2.3:a:apache:eventmesh-connector-rabbitmq:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductEventmesh Connector Rabbitmq (6502c1ea-b7d3-506e-873a-019aece27dfd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:apache/eventmesh purl2cpe 2026-06-01 10:14:30.431068
pkg:github/apache/eventmesh purl2cpe 2026-06-01 10:14:30.431071

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-26512 vulnerable 2026-06-08 05:57:39.848157 Apache EventMesh RabbitMQ-Connector plugin allows RCE through deserialization of untrusted data
CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh (incubating) V1.7.0\V1.8.0 on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via rabbitmq messages. Users can use the code under the master branch in project repo to fix this issue, we will release the new version as soon as possible.
Published: 2023-07-17T07:16:12.413Z
Updated: 2024-10-02T18:06:06.619Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.