CVE-2024-56180

Summary

CVE-2024-56180 is a deserialization vulnerability affecting the eventmesh-meta-raft plugin module in Apache EventMesh's master branch on Windows, Linux, and macOS. The flaw, classified as CWE-502, allows attackers to send malicious messages containing untrusted data, leading to remote code execution via the Hessian deserialization RPC protocol. Users are advised to avoid using the code under the master branch or version 1.11.0 and apply the necessary fixes to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.