PT-2023-4093 · Apache · Rocketmq

Soreatu + 3 · Published 2023-07-12 · Updated 2025-10-16 · CVE-2023-37582

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RocketMQ versions prior to 4.9.7 RocketMQ versions prior to 5.1.2

Description The vulnerability in the RocketMQ NameServer component allows for remote command execution. This issue arises when NameServer addresses are exposed on the extranet without proper permission verification, enabling an attacker to exploit the vulnerability by using the update configuration function to execute commands as the system user that RocketMQ is running as.

Recommendations For RocketMQ 4.x, upgrade to version 4.9.7 or above. For RocketMQ 5.x, upgrade to version 5.1.2 or above.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2023-04396

CVE-2023-37582

GHSA-GPQ8-963W-8QC9

Affected Products

Rocketmq

References · 19

• 🔥 https://github.com/Malayke/CVE-2023-37582_EXPLOIT · Exploit
• https://bdu.fstec.ru/vul/2023-04396 · Security Note
• https://osv.dev/vulnerability/CVE-2023-37582 · Vendor Advisory
• http://openwall.com/lists/oss-security/2023/07/12/1 · Patch
• https://osv.dev/vulnerability/GHSA-gpq8-963w-8qc9 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-37582 · Security Note
• https://lists.apache.org/thread/m614czxtpvlztd7mfgcs2xcsg36rdbnc · Vendor Advisory
• https://github.com/apache/rocketmq · Note
• https://twitter.com/rst_cloud/status/1837592810800689402 · Twitter Post
• https://twitter.com/E_S_Channel/status/1743631245861400730 · Twitter Post
• https://t.me/cvenotify/54708 · Telegram Post
• https://twitter.com/CCBalert/status/1749459161841013146 · Twitter Post
• https://t.me/cybersecuritytechnologies/8677 · Telegram Post
• https://t.me/pentestingnews/37613 · Telegram Post
• https://twitter.com/pdnuclei_bot/status/1978747777548243092 · Twitter Post