
This project is a Maven-based demonstration of mitigating CVE-2023-33246, a vulnerability in Apache RocketMQ.
org/example/Main.java: The main program file.org/apache/rocketmq/common/BrokerConfig.java: Modified version of the official RocketMQ 4.9.5 source code.Attack Testing: The updateConfig method in Main.java is used for attack testing purposes.
Enhanced Validation: The BrokerConfig.java file includes a new method getValidatedRocketmqHome(). This method strengthens the validation of the RocketmqHome parameter to prevent potential attacks.
This project is based on Apache RocketMQ 4.9.5. The complete official source code can be downloaded from: