skyscreamer/nevado

Releases32

Frequency3 weeks 6 days

Last Release almost 12 years ago

Stars50

A JMS driver for Amazon SQS.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-31826 ↗	May 23, 2023Tuesday, 23 May 2023, 01:15	7.8 HIGH	—
Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attackers to execute arbitrary commands via supplying crafted data.