Description
Apache RocketMQ是美国 Apache 基金会的一款轻量级的数据处理平台和消息传递引擎。 Apache RocketMQ 存在未授权访问后台漏洞，无需认证即可进入管理后台。
RocketMQ / 未授权访问漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnblogs.com/spmonkey/p/17767846.html
https://stack.chaitin.com/techblog/detail/104
https://zhuanlan.zhihu.com/p/646614752
https://www.aqtd.com/nd.jsp?id=4606
https://avd.aliyun.com/detail?id=AVD-2023-33246
https://security.zone.ci/aliyun/ali_nonvd/253281.html
https://juejin.cn/post/7468566313338961960
https://github.com/y1ong/blog-timeline/issues/34
https://cloud.tencent.com/developer/article/2470144
https://cn-sec.com/archives/3269754.html
https://nvd.nist.gov/vuln/detail/cve-2023-33246
https://www.secrss.com/articles/55208
https://rocketmq.apache.org/zh/docs/security/01security/
https://bbs.chaitin.cn/topic/644
https://www.sentinelone.com/vulnerability-database/cve-2023-33246/
https://blog.certcube.com/rocketmq-arbitrary-file-write-cve-2023-37582/