CVE-2016-2173

Critical

Published: 21/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Versions of Spring AMQP before 1.5.5 contain a vulnerability in the org.springframework.core.serializer.DefaultDeserializer class that allows remote attackers to execute arbitrary code.

Risk Assessment

This vulnerability could lead to serious security breaches, including an attacker gaining control over the system.

Recommendation

It is recommended to upgrade Spring AMQP to version 1.5.5 or later to mitigate this vulnerability.

Original NVD description (English source)

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code.