{"uuid": "ab9cd8f6-80f0-4e6e-b772-c985066f2a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-56180", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/18109", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-56180 - Apache EventMesh Hessian Deserialization Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-56180 \nPublished : Feb. 14, 2025, 2:15 p.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : CWE-502 Deserialization of Untrusted Data at the eventmesh-meta-raft\u00a0plugin\u00a0module in Apache EventMesh master branch without release version on windows\\linux\\mac os e.g. platforms allows attackers to send controlled message and remote code execute\u00a0via hessian deserialization rpc protocol. Users can use the code under the master branch in project repo or version 1.11.0 to fix this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T17:26:15.000000Z"}