What’s Vulnerable › Vulnerabilities

CVE-2023-31826

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-05-23 · updated 2026-06-17
• Weakness: CWE-862

Description

Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attackers to execute arbitrary commands via supplying crafted data.

Affected products

• Skyscreamer Nevado Jms: 1.3.2

References

• http://nevado.skyscreamer.org/
• https://github.com/skyscreamer/nevado/issues/121
• https://github.com/skyscreamer/nevado/releases
• https://novysodope.github.io/2023/04/01/95/
• http://nevado.skyscreamer.org/
• https://github.com/skyscreamer/nevado/issues/121
• https://github.com/skyscreamer/nevado/releases
• https://novysodope.github.io/2023/04/01/95/

Get alerted when CVE-2023-31826 or the next vulnerability affects your stack