Description
Apache ActiveMQ存在远程代码执行漏洞。此漏洞是由于ActiveMQ对用户的输入反序列化后缺乏校验导致的。该告警表明攻击者正在尝试利用该漏洞。
Apache ActiveMQ CVE-2023-46604 远程代码执行 - 阶段1：漏洞利用尝试
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://blog.csdn.net/qq_61872115/article/details/138211697
https://avd.aliyun.com/detail?id=AVD-2023-1687513
https://www.cnblogs.com/congyou/p/19006537
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/middleware/Apache-ActiveMQ-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2023-46604.md
https://www.venustech.com.cn/new_type/aqtg/20231103/26506.html
https://cloud.tencent.com/developer/article/2569389
https://nic.jiangnan.edu.cn/info/1102/3948.htm
https://www.yijinglab.com/specialized/20240109102045
https://t0ngmystic.com/sec/cve-2023-46604-activemq-rce/
https://www.rapid7.com/blog/post/2023/11/01/etr-suspected-exploitation-of-apache-activemq-cve-2023-46604/
https://vulncheck.com/blog/cve-2023-44604-activemq-in-memory
https://nvd.nist.gov/vuln/detail/cve-2023-46604
https://activemq.apache.org/security-advisories.data/CVE-2023-46604-announcement.txt
https://www.tenable.com/plugins/nessus/186650
https://arcticwolf.com/resources/blog/cve-2023-46604-critical-rce-vulnerability-in-apache-activemq/
https://thedfirreport.com/2026/02/23/apache-activemq-exploit-leads-to-lockbit-ransomware/
https://www.uptycs.com/blog/threat-research-report-team/apache-activemq-cve-2023-46604
https://community.greenbone.net/blog/cve-2023-46604-apache-activemq-actively-exploited-for-rce/
https://www.huntress.com/threat-library/vulnerabilities/cve-2023-46604