CVE-2023-34050

Summary

CVE-2023-34050 affects Spring AMQP versions 1.0.0 to 2.4.16 and 3.0.0 to 3.0.9. This vulnerability allows untrusted message originators to bypass default deserialization restrictions and write malicious content to RabbitMQ brokers. Specifically, if an application uses the SimpleMessageConverter or SerializerMessageConverter without configuring allowed list patterns, all classes can be deserialized, posing a security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.