
Maven-based demonstration of CVE-2023-33246 mitigation for Apache RocketMQ, featuring attack testing and enhanced parameter validation to prevent remote code execution.
This project is a Maven-based demonstration of mitigating CVE-2023-33246, a vulnerability in Apache RocketMQ.
org/example/Main.java: The main program file.org/apache/rocketmq/common/BrokerConfig.java: Modified version of the official RocketMQ 4.9.5 source code.Attack Testing: The updateConfig method in Main.java is used for attack testing purposes.
Enhanced Validation: The BrokerConfig.java file includes a new method getValidatedRocketmqHome(). This method strengthens the validation of the parameter to prevent potential attacks.
RocketmqHomeThis project is based on Apache RocketMQ 4.9.5. The complete official source code can be downloaded from: