Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attackers to execute arbitrary commands via supplying crafted data.
- https://novysodope.github.io/2023/04/01/95/
No PoCs found on GitHub currently.