ZDI-23-1281: Apache ActiveMQ NMS Body Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apache ActiveMQ NMS. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

apache arbitrary code attack attackers attack vectors body code code execution data deserialization exploit implementation library may nms remote code remote code execution untrusted vulnerability zdi