What is GHSA-7gm3-mwjw-j53w?

GHSA-7gm3-mwjw-j53w is a security advisory published by GitHub Security Advisories with High severity. Command injection in nevado-jms

Which CVE IDs does GHSA-7gm3-mwjw-j53w cover?

GHSA-7gm3-mwjw-j53w covers the following CVE IDs: CVE-2023-31826. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7gm3-mwjw-j53w?

GHSA-7gm3-mwjw-j53w has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

Which products are affected by GHSA-7gm3-mwjw-j53w?

GHSA-7gm3-mwjw-j53w affects 1 product, including: maven/org.skyscreamer:nevado-jms:\u003c= 1.3.2.

GHSA-7gm3-mwjw-j53wHighCVSS 7.8

Command injection in nevado-jms

Vendor

GitHub Security Advisories

Published

May 23, 2023

Last Modified

January 17, 2025

🔗 CVE IDs covered (1)

CVE-2023-31826 →

📋 Description

Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attackers to execute arbitrary commands via supplying crafted data.

🎯 Affected products1

maven/org.skyscreamer:nevado-jms:<= 1.3.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2023-31826
https://github.com/skyscreamer/nevado/issues/121
https://github.com/skyscreamer/nevado/releases
https://novysodope.github.io/2023/04/01/95
http://nevado.skyscreamer.org
https://github.com/advisories/GHSA-7gm3-mwjw-j53w