2023-10-26 21:21:56 +08:00
|
|
|
## Apache ActiveMQ远程命令执行漏洞
|
|
|
|
|
|
|
|
|
|
## 影响版本
|
|
|
|
|
```
|
2023-10-28 13:56:15 +08:00
|
|
|
5.18.0<=Apache ActiveMQ<5.18.3
|
|
|
|
|
5.17.0<=Apache ActiveMQ<5.17.6
|
|
|
|
|
5.16.0<=Apache ActiveMQ<5.16.7
|
|
|
|
|
5.15.0<=Apache ActiveMQ<5.15.15
|
2023-10-26 21:21:56 +08:00
|
|
|
```
|
2023-10-28 13:47:02 +08:00
|
|
|
## fofa
|
|
|
|
|
```
|
|
|
|
|
app="APACHE-ActiveMQ" && port="61616"
|
|
|
|
|
```
|
2023-10-26 21:21:56 +08:00
|
|
|
## 漏洞脚本
|
|
|
|
|
```
|
|
|
|
|
https://github.com/Fw-fW-fw/activemq_Throwable
|
2023-10-28 14:22:17 +08:00
|
|
|
https://github.com/sincere9/Apache-ActiveMQ-RCE
|
|
|
|
|
https://github.com/X1r0z/ActiveMQ-RCE
|
2023-10-26 21:21:56 +08:00
|
|
|
```
|
|
|
|
|
|
|
|
|
|
## 漏洞分析
|
|
|
|
|
```
|
|
|
|
|
https://paper.seebug.org/3058/
|
|
|
|
|
https://mp.weixin.qq.com/s/4n7vyeXLtim0tXcjnSWDAw
|
|
|
|
|
```
|
