CVE-2017-8045
CriticalSummary
In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack.
Risk Assessment
This vulnerability poses a risk of remote code execution, which could allow an attacker to gain control over the system.
Recommendation
It is recommended to upgrade to Pivotal Spring AMQP versions 1.7.4, 1.6.11, or 1.5.7 to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack.