CVE-2020-36282

Description

JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution via crafted StreamMessage data.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

1.699

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-36282 are fixed in RabbitMQ-rabbitmq-jms 2.2.0	Windows
Vulnerabilities CVE-2020-36282 are fixed in RabbitMQ-rabbitmq-jms 1.15.2	Windows
Vulnerabilities CVE-2020-36282 are fixed in RabbitMQ-rabbitmq-jms for Linux 2.2.0	Linux
Vulnerabilities CVE-2020-36282 are fixed in RabbitMQ-rabbitmq-jms for Linux 1.15.2	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234