| Package | Affected versions | Patched versions |
|---|---|---|
| com.rabbitmq.jms:rabbitmq-jms | ≥ 1.0, < 1.15.2≥ 2.0, < 2.2.0 | 1.15.22.2.0 |
| jms client | ≥ 1.0.0, < 1.15.2≥ 2.0.0, < 2.2.0 | 1.15.22.2.0 |
JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution via crafted StreamMessage data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free