CVE-2023-33246— Apache RocketMQ 代码注入漏洞
Public Exploits 1
Metasploit · 1 apache_rocketmq_update_config.rb [exploit]
In-the-Wild Activity Observed cisa_kev · confirmed
Possible ATT&CK Techniques 2AI
T1071 · Application Layer Protocol T1190 · Exploit Public-Facing Application新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2023-33246の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
ソース: CVE Program / CVE List V5
脆弱性説明
For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution. Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the update configuration function to execute commands as the system users that RocketMQ is running as. Additionally, an attacker can achieve the same effect by forging the RocketMQ protocol content. To prevent these attacks, users are recommended to upgrade to version 5.1.1 or above for using RocketMQ 5.x or 4.9.6 or above for using RocketMQ 4.x .
ソース: CVE Program / CVE List V5
CVSS情報
N/A
ソース: CVE Program / CVE List V5
脆弱性タイプ
对生成代码的控制不恰当(代码注入)
ソース: CVE Program / CVE List V5
脆弱性タイトル
Apache RocketMQ 代码注入漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Apache RocketMQ是美国阿帕奇（Apache）基金会的一款轻量级的数据处理平台和消息传递引擎。 Apache RocketMQ 5.1.0及之前版本存在代码注入漏洞，该漏洞源于存在远程命令执行漏洞，攻击者可以利用该漏洞利用更新配置功能以系统用户身份执行命令。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Apache Software Foundation | Apache RocketMQ | 0 ~ 5.1.0 | - |
II. CVE-2023-33246の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|---|---|---|
| 1 | None | https://github.com/I5N0rth/CVE-2023-33246 | POC詳細 |
| 2 | None | https://github.com/yizhimanpadewoniu/CVE-2023-33246-Copy | POC詳細 |
| 3 | Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246) Exploit | https://github.com/Le1a/CVE-2023-33246 | POC詳細 |
| 4 | Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246) Exploit | https://github.com/SuperZero/CVE-2023-33246 | POC詳細 |
| 5 | CVE-2023-33246 RocketMQ RCE Detect By Version and Exploit | https://github.com/Malayke/CVE-2023-33246_RocketMQ_RCE_EXPLOIT | POC詳細 |
| 6 | CVE-2023-33246：Apache RocketMQ 远程命令执行漏洞检测工具 | https://github.com/CKevens/CVE-2023-33246 | POC詳細 |
| 7 | RocketMQ RCE (CVE-2023-33246) woodpecker 利用插件 | https://github.com/cr1me0/rocketMq_RCE | POC詳細 |
| 8 | CVE-2023-33246 | https://github.com/Devil0ll/CVE-2023-33246 | POC詳細 |
| 9 | CVE-2023-33246 POC | https://github.com/d0rb/CVE-2023-33246 | POC詳細 |
| 10 | A tool to fetch the RocketMQ broker configuration in order to discover indicators of compromise for CVE-2023-33246 | https://github.com/vulncheck-oss/fetch-broker-conf | POC詳細 |
| 11 | CVE-2023-33246 - Apache RocketMQ config RCE | https://github.com/0xKayala/CVE-2023-33246 | POC詳細 |
| 12 | None | https://github.com/MkJos/CVE-2023-33246_RocketMQ_RCE_EXP | POC詳細 |
| 13 | None | https://github.com/hanch7274/CVE-2023-33246 | POC詳細 |
| 14 | CVE-2023-33246：Apache RocketMQ 远程命令执行漏洞检测工具 | https://github.com/3yujw7njai/CVE-2023-33246 | POC詳細 |
| 15 | None | https://github.com/PavilionQ/CVE-2023-33246-mitigation | POC詳細 |
| 16 | None | https://github.com/4mazing/CVE-2023-33246-Copy | POC詳細 |
| 17 | None | https://github.com/Sumitpathania03/Apache-RocketMQ-CVE-2023-33246- | POC詳細 |
| 18 | CVE-2023-33246：Apache RocketMQ 远程命令执行漏洞检测工具 | https://github.com/AiK1d/CVE-2023-33246 | POC詳細 |
| 19 | For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution. Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the update configuration function to execute commands as the system users that RocketMQ is running as. Additionally, an attacker can achieve the same effect by forging the RocketMQ protocol content. To prevent these attacks, users are recommended to upgrade to version 5.1.1 or above for using RocketMQ 5.x or 4.9.6 or above for using RocketMQ 4.x . | https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-33246.yaml | POC詳細 |
| 20 | None | https://github.com/Threekiii/Awesome-POC/blob/master/%E4%B8%AD%E9%97%B4%E4%BB%B6%E6%BC%8F%E6%B4%9E/Apache%20RocketMQ%20Broker%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2023-33246.md | POC詳細 |
| 21 | https://github.com/vulhub/vulhub/blob/master/rocketmq/CVE-2023-33246/README.md | POC詳細 | |
| 22 | None | https://github.com/shoucheng3/apache__rocketmq_CVE-2023-33246_5-1-0 | POC詳細 |
| 23 | CVE-2023-33246：Apache RocketMQ 远程命令执行漏洞检测工具 | https://github.com/P4x1s/CVE-2023-33246 | POC詳細 |
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2023-33246のインテリジェンス情報
请登录查看更多情报信息。
CVE-2023-33246 公开利用代码 (1)
CVE-2023-33246 邮件列表归档 (2)
IV. 関連脆弱性
同じベンダー: Apache Software Foundation
- CVE-2026-73633
Apache Struts: Unbounded read of a JSON request body - CVE-2026-66256
Apache Shindig Common, Apache Shindig Social-Api: Remote Cod - CVE-2026-73237
Apache Allura: XSS in markdown pipeline - CVE-2026-73238
Apache Allura: XSS in code display - CVE-2026-73239
Apache Allura: Missing permission checks IDOR
同じ弱点: CWE-94
- CVE-2026-73679
ImpressCMS Authenticated RCE via PHP Custom Tag eval() - CVE-2026-73678
MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scrat - CVE-2026-46439
compliance-trestle Vulnerable to Remote Code Execution via R - CVE-2026-19768
ReDOS漏洞影响Devolutions PowerShell Universal 2026.2.3 - CVE-2026-72819
Grav CMS before 2.0.13 Remote Code Execution via ZIP Upload
V. CVE-2023-33246へのコメント
まだコメントはありません