cve/2021/CVE-2021-20318.md

### [CVE-2021-20318](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20318)
![](https://img.shields.io/static/v1?label=Product&message=Artemis%20in%20EAP%207&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=7.3.9.GA%2C%207.4.0.GA%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-502&color=brightgreen)

### Description

The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using a JMS ObjectMessage.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon