Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2023-31826

Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attackers to execute arbitrary commands via supplying crafted data.

VectorLOCAL

PublishedMay 23, 2023, 01:15

Published Bycve@mitre.org

Base Score

Score7.8

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.skyscreamer:nevado-jms(Maven)0N/AN/A

References

http://nevado.skyscreamer.org/
https://github.com/skyscreamer/nevado/issues/121
https://github.com/skyscreamer/nevado/releases
https://novysodope.github.io/2023/04/01/95/

Weakness Type

CWE-862

CVSS Metrics

Base Score

7.8

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

LOCAL