← CVE Intelligence

CVE-2017-8045

n/a / Spring AMQP Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7 PUBLISHED

Description (CNA)

In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack.

Affected (CNA)

Vendor / productVersions
n/a / Spring AMQP Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7affected Spring AMQP Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.