-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.springframework.amqp:spring-amqp | maven | >= 2.2.0, <= 2.2.18 | 2.2.19 |
| org.springframework.amqp:spring-amqp | maven | >= 2.3.0, <= 2.3.10 | 2.3.11 |
The vulnerability is directly related to the toString() method's behavior of deserializing the message body. The toString() method is likely overridden in a class such as org.springframework.amqp.core.Message. The precise identification of toString() as vulnerable is based on the vulnerability description.
Ongoing coverage of React2Shell