CVE-2017-8045

Name of the Vulnerable Software and Affected Versions Pivotal Spring AMQP versions prior to 1.7.4 Pivotal Spring AMQP versions prior to 1.6.11 Pivotal Spring AMQP versions prior to 1.5.7

Description The issue allows an org.springframework.amqp.core.Message to be unsafely deserialized when being converted into a string, potentially enabling a remote code execution attack if a malicious payload is crafted.

Recommendations For versions prior to 1.7.4, update to version 1.7.4 or later. For versions prior to 1.6.11, update to version 1.6.11 or later. For versions prior to 1.5.7, update to version 1.5.7 or later.