📦 Eventmesh

This vulnerability allows attackers to achieve remote code execution on Apache EventMesh servers by sending malicious messages that trigger unsafe deserialization via the Hessian RPC protocol. It affe...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in the eventmesh-runtime module's WebhookUtil.java component. Attackers can exploit this to make the server send requests to inter...