[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7KcULyA2cVLEmbEHAaQEkhvyzkd7M7NPE3A4ZGcGhfA":3,"g5a-risk:CVE-2023-50780":116},{"success":4,"data":5,"meta":113},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":26,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":45,"references":46,"referencesCount":58,"weaknesses":59,"weaknessesCount":45,"isActivelyExploited":68,"cisaInfo":26,"otxData":26,"relatedBlogPosts":69,"seoMetadata":70,"configurations":95,"relatedVendorCves":104,"notableEvents":105},"CVE-2023-50780","What is CVE-2023-50780?","Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticated Jolokia endpoint. Before version 2.29.0, this also included the Log4J2 MBean. This MBean is not meant for exposure to non-administrative users. This could eventually allow an authenticated attacker to write arbitrary files to the filesystem and indirectly achieve RCE.\n\n\nUsers are recommended to upgrade to version 2.29.0 or later, which fixes the issue.","Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticated Jolokia endpoin...","2024-10-14T16:15:03.477","2026-06-17T06:39:57.91",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":35},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[],[],0.17457,[36,36,36,36,36,36,36],"High",[40],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"apache","artemis","*","cpe:2.3:a:apache:artemis:*:*:*:*:*:*:*:*",1,[47,54],{"url":48,"source":49,"tags":50},"https:\u002F\u002Flists.apache.org\u002Fthread\u002F63b78shqz312phsx7v1ryr7jv7bprg58","Apache",[51,52,53],"Issue Tracking","Mailing List","Vendor Advisory",{"url":55,"source":56,"tags":57},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F10\u002F14\u002F2","Openwall",[],2,[60],{"id":61,"name":62,"description":63,"extendedDescription":64,"status":65,"abstraction":66,"structure":67},"CWE-285","Improper Authorization","The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.","Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.\nWhen access control checks are not applied consistently - or not at all - users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.","Draft","Class","Simple",false,[],{"title":71,"metaDescription":72,"keywords":73,"canonicalUrl":74,"structuredData":75},"What is CVE-2023-50780? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-50780, a high severity cyber security vulnerability from 2024. Apache ActiveMQ Artemis allows access to diagnostic informa...","CVE-2023-50780, CVE-2023-50780 vulnerability, CVE-2023-50780 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, apache security, artemis vulnerability","\u002Fwhat-is\u002Fcve-2023-50780",{"@context":76,"@type":77,"headline":71,"description":72,"datePublished":10,"dateModified":11,"author":78,"publisher":82,"about":86,"mainEntityOfPage":90,"articleSection":93,"keywords":94},"https:\u002F\u002Fschema.org","TechArticle",{"@type":79,"name":80,"url":81},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":79,"name":80,"url":81,"logo":83},{"@type":84,"url":85},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":87,"name":6,"description":88,"additionalType":89},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":91,"@id":92},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-50780","Cybersecurity","CVE-2023-50780, CVE-2023-50780 vulnerability, CVE-2023-50780 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[96],{"Operator":26,"Negate":26,"Nodes":97},[98],{"Operator":99,"Negate":68,"CPEMatch":100},"OR",[101],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":102,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":103,"VersionEndIncluding":26},"F4F37D34-9B1D-495C-8992-83E5F5BE4C5A","2.29.0",[],[106],{"id":107,"eventType":108,"eventTime":109,"details":110,"label":111,"color":112},"cea3c02d-f7cb-408c-933a-5f223a642353","HIGH_EPSS_DELTA","2026-06-16T04:04:57.388677+00:00","Daily EPSS score increased by 0.144 on 2024-10-16","EPSS Score Increased","red",{"lastModified":11,"cacheTime":114,"version":115},1792249999253,"2.0",{"score":117,"band":118,"action":119,"scoredAt":120},58,"Medium","Plan remediation","2026-10-16T07:04:04.625759+00:00"]