Active Exploitation of Apache RocketMQ updateConfig Command Execution Vulnerability (CVE-2023-33246)

What is VMware Apache RocketMQ?



Apache RocketMQ is an open-source distributed messaging middleware developed by the Alibaba. It was later donated to Apache.






What is the Attack?

CVE-2023-33246 is a command injection vulnerability that affects Apache RocketMQ versions 5.1 and lower. Successful exploitation of the vulnerability allows a remote attacker to execute commands as the system user under which RocketMQ is running by using the update configuration function.




Why is this Significant?



This is significant because CVE-2023-33246 is reportedly being …

alibaba apache attack command command injection cve distributed exploitation injection messaging middleware vmware vulnerability what is