Description
Apache RocketMQ 远程代码执行漏洞(CVE-2023-37582)
Apache RocketMQ 远程代码执行漏洞(CVE-2023-37582)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-37582
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/middleware/Apache-RocketMQ-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2023-37582.md
https://www.cnblogs.com/spmonkey/p/17767846.html
https://avd.aliyun.com/detail?id=AVD-2023-37582
https://zhuanlan.zhihu.com/p/644714481
https://stack.chaitin.com/techblog/detail/126
https://comate.baidu.com/zh/page/ummgro36mvo
https://www.huaweicloud.com/notice/2022/20230714175816369.html
https://isecurity.huawei.com/sec/web/viewAlert.do?id=2458
https://drun1baby.top/2023/11/21/CVE-2023-37582-Apache-RocketMQ-RCE-%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/
https://www.secrss.com/articles/56677
https://blog.certcube.com/rocketmq-arbitrary-file-write-cve-2023-37582/
https://rocketmq.apache.org/docs/security/01security/