Attacks aimed at vulnerable Apache RocketMQ servers underway

BleepingComputer reports that internet-exposed Apache RocketMQ servers vulnerable to the critical remote code execution flaws, tracked as CVE-2023-33246 and CVE-2023-37582 the latter of which stemmed from the incomplete fix of the former were discovered by The ShadowServer Foundation to have been scanned by hundreds of hosts around the world daily for attempted exploitation.

apache attacks bleepingcomputer code code execution critical cve daily exposed fix flaws foundation internet network security remote code remote code execution reports rocketmq rocketmq servers servers shadowserver threat intelligence vulnerability management vulnerable world