CVE-2017-8045

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-8045
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-8045.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-8045
Aliases
Published
2017-11-27T10:29:00Z
Modified
2025-04-20T04:04:03.802549Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack.

References

Affected packages

Git / github.com/spring-projects/spring-amqp

Affected ranges

Type
GIT
Repo
https://github.com/spring-projects/spring-amqp
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
047558ca7faee2b423828b87a9eff729818d851d
Last affected
13c897d26ad3ff4422807a7e182d940f224388ad
Last affected
233aa11cf9046fb8c2c3c5a373d09d9e645aa2b3
Last affected
3d3afabd6ac0d8cd5f2e30b388e88a535b8ef1f9
Last affected
424158a5458a27a05dbbb1af921ea01937c3beb3
Last affected
438ce17f05510c7a77d73bf39701e594a6e0c673
Last affected
4f89f884567ee6f4eae2f86157611635d3430cf9
Last affected
5ba5736bb96813227de053b270273534e069fc63
Last affected
5e982feb1fcc9ca750aff1c61c7e219f29369c53
Last affected
5f117e7244f2a38e7a800f6455af753395da84f5
Last affected
6ccdd91359b927ca5d31ad31177fc4d438691f29
Last affected
727c8307f2fca1ed94bfbef16cfd23b00c7fe565
Last affected
73c8236f341bd7104082084c0c813c5633f86be4
Last affected
780f7228e3683614b0f45b5a7f1445769b45e823
Last affected
7b0f9b545f7aedf9c07a2fdd0b5c1d77dd06a9a5
Last affected
881a95c45aae15ea55d5ce0720f78746996cca7b
Last affected
92c4c554c8b58acab965ac28211306435b1b127e
Last affected
a76c13b6dbc0773beb12061447e3ccb9f68fdc71
Last affected
ad15ea91f0cb291aa3889d50f92c997b064c9c1a
Last affected
b2d06074d43751406c50276099ab21a570631ead
Last affected
b6c74d7fd46e13d98ef0cb3c82518fca1cc11e84
Last affected
c1f4c1aec82aef12f49f2f63c6d8a61f7052d250
Last affected
c91e85daba9c6ce59476e95741b46308b6b92be3
Last affected
cf70e7f8f03d072c850390fc8a99a0a90f2f83a3
Last affected
e661273cfc20d6483ba71b6a1e4e4eb5cedeb8f0
Last affected
ee76fdcf1547e40111519b7447ae9e1742fae1cc
Last affected
f85036eef00b6d239c32774eb89b18575344c21b

Affected versions

1.*

1.0.0.M1
1.0.0.M2
1.1.0.RELEASE
1.1.1.RELEASE

v1.*

v1.2.0.RC1
v1.2.0.RELEASE
v1.2.0a.M1
v1.3.0.M1
v1.3.0.M2
v1.3.0.RC1
v1.3.0.RELEASE
v1.3.1.RELEASE
v1.3.2.RELEASE
v1.3.3.RELEASE
v1.3.4.RELEASE
v1.4.0.M1
v1.4.0.RC1
v1.4.0.RELEASE
v1.4.1.RELEASE
v1.4.2.M1
v1.4.2.M2
v1.4.2.RELEASE
v1.5.0.M1
v1.5.0.RC1