https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 04:26:57 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-29366 cnvd-2020-29366 https://cve.radiocsirt.org/vuln/cnvd-2020-29366 https://cve.radiocsirt.org/vuln/euvd-2026-58411 EUVD-2026-58411 https://cve.radiocsirt.org/vuln/euvd-2026-58411 https://cve.radiocsirt.org/vuln/fkie_cve-2019-17572 <p>In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in brokers, which leads to a directory traversal vulnerability. Users of the affected versions should apply one of the following: Upgrade to Apache RocketMQ 4.6.1 or later.</p> <p>In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in brokers, which leads to a directory traversal vulnerability. Users of the affected versions should apply one of the following: Upgrade to Apache RocketMQ 4.6.1 or later.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-17572 https://cve.radiocsirt.org/vuln/ghsa-5x3v-2gxr-59m2 <p><strong>Affected:</strong> Maven: org.apache.rocketmq:rocketmq-broker</p> <p>In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in brokers, which leads to a directory traversal vulnerability. Users of the affected versions should apply one of the following: Upgrade to Apache RocketMQ 4.6.1 or later.</p> <p><strong>Affected:</strong> Maven: org.apache.rocketmq:rocketmq-broker</p> <p>In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in brokers, which leads to a directory traversal vulnerability. Users of the affected versions should apply one of the following: Upgrade to Apache RocketMQ 4.6.1 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-5x3v-2gxr-59m2 https://cve.radiocsirt.org/vuln/gsd-2019-17572 gsd-2019-17572 https://cve.radiocsirt.org/vuln/gsd-2019-17572