Product Introduction#
Apache RocketMQ is a lightweight data processing platform and message delivery engine from the Apache Foundation.
Vulnerability Overview#
Apache RocketMQ versions 5.1.0 and earlier have a code injection vulnerability. This vulnerability is due to a remote command execution vulnerability, which allows attackers to execute commands as system users by exploiting the update configuration function.
Impact Scope#
<5.1.0
Vulnerability Reproduction#
Environment setup:
Check for vulnerability using the script
Reverse shell
nc listens on 1234
Recommended Fixes#
Official patches have been released. Official patch download link: https://lists.apache.org/thread/1s8j2c8kogthtpv3060yddk03zq0pxyp