CVE-2024-56180

CWE-502 Deserialization of Untrusted Data at the eventmesh-meta-raft plugin module in Apache EventMesh master branch without release version on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via hessian deserialization rpc protocol. Users can use the code under the master branch in project repo or version 1.11.0 to fix this issue.

• CWE-502

• https://lists.apache.org/thread/k9fw0t5r7t1vbx53gs8d1r8c54rhx0wdIssue Tracking, Mailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2025/02/14/7Mailing List, Third Party Advisory

Published

Feb 14, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-56173In Optimizely Configured Commerce before 5.2.2408, malicious…4.7
• CVE-2024-56174In Optimizely Configured Commerce before 5.2.2408, malicious…8.1
• CVE-2024-56175In Optimizely Configured Commerce before 5.2.2408, malicious…6.1
• CVE-2024-56178An issue was discovered in Couchbase Server 7.6.x through 7.…6.5
• CVE-2024-56179In MindManager Windows versions prior to 24.1.150, attackers…7.8
• CVE-2024-5618Incorrect Permission Assignment for Critical Resource vulner…9.9
• CVE-2024-56181A vulnerability has been identified in SIMATIC Field PG M5 (…8.4
• CVE-2024-56182A vulnerability has been identified in SIMATIC Field PG M5 (…8.4
• CVE-2024-56184In static long dev_send of tipc_dev_ql, there is a possible …5.1
• CVE-2024-56185In ProtocolUnsolOnSSAdapter::GetServiceClass() of protocolca…5.1
• CVE-2024-56186In closeChannel of secureelementimpl.cpp, there is a possibl…5.1
• CVE-2024-56187In ppcfw_deny_sec_dram_access of ppcfw.c, there is a possibl…6.6