{"uuid": "1919c0d7-4162-4481-b0df-c0db82ca4984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46604", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/apache_activemq_rce_cve_2023_46604.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"X1r0z\", \"sfewer-r7\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a deserialization vulnerability in the OpenWire transport unmarshaller in Apache\\n          ActiveMQ. Affected versions include 5.18.0 through to 5.18.2, 5.17.0 through to 5.17.5, 5.16.0 through to\\n          5.16.6, and all versions before 5.15.16.\", \"disclosure_date\": \"2023-10-27\", \"fullname\": \"exploit/multi/misc/apache_activemq_rce_cve_2023_46604\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:09 +0000\", \"name\": \"Apache ActiveMQ Unauthenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/misc/apache_activemq_rce_cve_2023_46604.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/misc/apache_activemq_rce_cve_2023_46604\", \"references\": [\"CVE-2023-46604\", \"URL-https://github.com/X1r0z/ActiveMQ-RCE\", \"URL-https://exp10it.cn/2023/10/apache-activemq-%E7%89%88%E6%9C%AC-5.18.3-rce-%E5%88%86%E6%9E%90/\", \"URL-https://attackerkb.com/topics/IHsgZDE3tS/cve-2023-46604/rapid7-analysis\", \"URL-https://activemq.apache.org/security-advisories.data/CVE-2023-46604-announcement.txt\"], \"rport\": 61616, \"session_types\": false, \"targets\": [\"Windows\", \"Linux\", \"Unix\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:25.114472Z"}