CVE-2024-51127: redhat hornetq Path Traversal

CVSS: 9.1v3.1CriticalModified

AliasesRHSA-2024:11529RHSA-2025:0371RHSA-2025:1636+3 more

Published 04-11-2024Last modified 05-07-2026

Vulnerability summary

CVE-2024-51127 is a critical (CVSS 9.1) Path Traversal vulnerability in redhat hornetq. EPSS estimates a 0.67% chance of exploitation in the next 30 days, higher than 51.1% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.1/10

010

Critical · v3.1 (CVE.org)

EPSS score

0.67%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1github

Advisory lineage

Upstream 0 · Downstream 4

RHSA-2024:11559 RHSA-2024:11560 RHSA-2025:16667 RHSA-2025:16668

Timeline

04-11-2024
PublishedVulnerability first disclosed.
05-07-2026
Last modifiedVulnerability information updated.

Description

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information.

CVSS metrics

5 scores · 4 sources · 2 versions

v4.09.3v3.19.1

EPSS trend

Probability

0.67%

Chance of exploitation in the next 30 days

Percentile

51%

Versus all other CVEs

30-day change

0.00 pp

From 0.67% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.67%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

githubUnverified
Cwe 378
Maturity: poc

Weaknesses

CWE · root cause

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Affected systems

Redhat46 products

hornetq≤ 2.4.9
eap7-hal-console< 0:3.3.25-1.Final_redhat_00001.1.el7eap | < 0:3.3.25-1.Final_redhat_00001.1.el8eap | < 0:3.3.25-1.Final_redhat_00001.1.el9eap
eap7-hibernate< 0:5.3.37-1.Final_redhat_00001.1.el7eap | < 0:5.3.37-1.Final_redhat_00001.1.el8eap | < 0:5.3.37-1.Final_redhat_00001.1.el9eap
eap7-hibernate-core< 0:5.3.37-1.Final_redhat_00001.1.el7eap | < 0:5.3.37-1.Final_redhat_00001.1.el8eap | < 0:5.3.37-1.Final_redhat_00001.1.el9eap
eap7-hibernate-entitymanager< 0:5.3.37-1.Final_redhat_00001.1.el7eap | < 0:5.3.37-1.Final_redhat_00001.1.el8eap

eap7-hibernate-envers< 0:5.3.37-1.Final_redhat_00001.1.el7eap | < 0:5.3.37-1.Final_redhat_00001.1.el8eap | < 0:5.3.37-1.Final_redhat_00001.1.el9eap
eap7-hibernate-java8< 0:5.3.37-1.Final_redhat_00001.1.el7eap | < 0:5.3.37-1.Final_redhat_00001.1.el8eap
eap7-hornetq< 0:2.4.11-1.Final_redhat_00001.1.el7eap | < 0:2.4.11-1.Final_redhat_00001.1.el8eap | < 0:2.4.11-1.Final_redhat_00001.1.el9eap
eap7-hornetq-commons< 0:2.4.11-1.Final_redhat_00001.1.el7eap | < 0:2.4.11-1.Final_redhat_00001.1.el8eap | < 0:2.4.11-1.Final_redhat_00001.1.el9eap
eap7-hornetq-core-client< 0:2.4.11-1.Final_redhat_00001.1.el7eap | < 0:2.4.11-1.Final_redhat_00001.1.el8eap | < 0:2.4.11-1.Final_redhat_00001.1.el9eap
eap7-hornetq-jms-client< 0:2.4.11-1.Final_redhat_00001.1.el7eap | < 0:2.4.11-1.Final_redhat_00001.1.el8eap | < 0:2.4.11-1.Final_redhat_00001.1.el9eap
eap7-jbossws-common< 0:3.4.0-1.Final_redhat_00001.1.el7eap | < 0:3.4.0-1.Final_redhat_00001.1.el8eap | < 0:3.4.0-1.Final_redhat_00001.1.el9eap
eap7-jbossws-cxf< 0:5.4.14-1.Final_redhat_00001.1.el7eap | < 0:5.4.14-1.Final_redhat_00001.1.el8eap | < 0:5.4.14-1.Final_redhat_00001.1.el9eap
eap7-opensaml< 0:3.4.6-1.redhat_00001.1.el7eap | < 0:3.4.6-1.redhat_00001.1.el8eap | < 0:3.4.6-1.redhat_00001.1.el9eap
eap7-opensaml-core< 0:3.4.6-1.redhat_00001.1.el7eap | < 0:3.4.6-1.redhat_00001.1.el8eap | < 0:3.4.6-1.redhat_00001.1.el9eap
eap7-opensaml-profile-api< 0:3.4.6-1.redhat_00001.1.el7eap | < 0:3.4.6-1.redhat_00001.1.el8eap | < 0:3.4.6-1.redhat_00001.1.el9eap
eap7-opensaml-saml-api< 0:3.4.6-1.redhat_00001.1.el7eap | < 0:3.4.6-1.redhat_00001.1.el8eap | < 0:3.4.6-1.redhat_00001.1.el9eap
eap7-opensaml-saml-impl< 0:3.4.6-1.redhat_00001.1.el7eap | < 0:3.4.6-1.redhat_00001.1.el8eap | < 0:3.4.6-1.redhat_00001.1.el9eap
eap7-opensaml-security-api< 0:3.4.6-1.redhat_00001.1.el7eap | < 0:3.4.6-1.redhat_00001.1.el8eap | < 0:3.4.6-1.redhat_00001.1.el9eap
eap7-opensaml-security-impl< 0:3.4.6-1.redhat_00001.1.el7eap | < 0:3.4.6-1.redhat_00001.1.el8eap | < 0:3.4.6-1.redhat_00001.1.el9eap
eap7-opensaml-soap-api< 0:3.4.6-1.redhat_00001.1.el7eap | < 0:3.4.6-1.redhat_00001.1.el8eap | < 0:3.4.6-1.redhat_00001.1.el9eap
eap7-opensaml-xacml-api< 0:3.4.6-1.redhat_00001.1.el7eap | < 0:3.4.6-1.redhat_00001.1.el8eap | < 0:3.4.6-1.redhat_00001.1.el9eap
eap7-opensaml-xacml-impl< 0:3.4.6-1.redhat_00001.1.el7eap | < 0:3.4.6-1.redhat_00001.1.el8eap | < 0:3.4.6-1.redhat_00001.1.el9eap
eap7-opensaml-xacml-saml-api< 0:3.4.6-1.redhat_00001.1.el7eap | < 0:3.4.6-1.redhat_00001.1.el8eap | < 0:3.4.6-1.redhat_00001.1.el9eap
eap7-opensaml-xacml-saml-impl< 0:3.4.6-1.redhat_00001.1.el7eap | < 0:3.4.6-1.redhat_00001.1.el8eap | < 0:3.4.6-1.redhat_00001.1.el9eap
eap7-opensaml-xmlsec-api< 0:3.4.6-1.redhat_00001.1.el7eap | < 0:3.4.6-1.redhat_00001.1.el8eap | < 0:3.4.6-1.redhat_00001.1.el9eap
eap7-opensaml-xmlsec-impl< 0:3.4.6-1.redhat_00001.1.el7eap | < 0:3.4.6-1.redhat_00001.1.el8eap | < 0:3.4.6-1.redhat_00001.1.el9eap
eap7-wildfly< 0:7.4.21-2.GA_redhat_00001.1.el7eap | < 0:7.4.21-2.GA_redhat_00001.1.el8eap | < 0:7.4.21-2.GA_redhat_00001.1.el9eap
eap7-wildfly-java-jdk11< 0:7.4.21-2.GA_redhat_00001.1.el7eap | < 0:7.4.21-2.GA_redhat_00001.1.el8eap | < 0:7.4.21-2.GA_redhat_00001.1.el9eap
eap7-wildfly-java-jdk17< 0:7.4.21-2.GA_redhat_00001.1.el8eap | < 0:7.4.21-2.GA_redhat_00001.1.el9eap
eap7-wildfly-java-jdk8< 0:7.4.21-2.GA_redhat_00001.1.el7eap | < 0:7.4.21-2.GA_redhat_00001.1.el8eap | < 0:7.4.21-2.GA_redhat_00001.1.el9eap
eap7-wildfly-javadocs< 0:7.4.21-2.GA_redhat_00001.1.el7eap | < 0:7.4.21-2.GA_redhat_00001.1.el8eap | < 0:7.4.21-2.GA_redhat_00001.1.el9eap
eap7-wildfly-modules< 0:7.4.21-2.GA_redhat_00001.1.el7eap | < 0:7.4.21-2.GA_redhat_00001.1.el8eap | < 0:7.4.21-2.GA_redhat_00001.1.el9eap
eap7-xml-security< 0:2.3.5-1.redhat_00001.1.el7eap | < 0:2.3.5-1.redhat_00001.1.el8eap | < 0:2.3.5-1.redhat_00001.1.el9eap
eap8-eap-product-conf-parent< 0:800.5.1-1.GA_redhat_00001.1.el8eap | < 0:800.5.1-1.GA_redhat_00001.1.el9eap
eap8-eap-product-conf-wildfly-ee-feature-pack< 0:800.5.1-1.GA_redhat_00001.1.el8eap | < 0:800.5.1-1.GA_redhat_00001.1.el9eap
eap8-hornetq< 0:2.4.11-1.Final_redhat_00001.1.el8eap | < 0:2.4.11-1.Final_redhat_00001.1.el9eap
eap8-hornetq-commons< 0:2.4.11-1.Final_redhat_00001.1.el8eap | < 0:2.4.11-1.Final_redhat_00001.1.el9eap
eap8-hornetq-core-client< 0:2.4.11-1.Final_redhat_00001.1.el8eap | < 0:2.4.11-1.Final_redhat_00001.1.el9eap
eap8-hornetq-jakarta-client< 0:2.4.11-1.Final_redhat_00001.1.el8eap | < 0:2.4.11-1.Final_redhat_00001.1.el9eap
eap8-jgroups< 1:5.2.23-2.Final_redhat_00001.1.el8eap | < 1:5.2.23-2.Final_redhat_00001.1.el9eap
eap8-wildfly< 0:8.0.5-5.GA_redhat_00004.1.el8eap | < 0:8.0.5-5.GA_redhat_00004.1.el9eap
eap8-wildfly-java-jdk11< 0:8.0.5-5.GA_redhat_00004.1.el8eap | < 0:8.0.5-5.GA_redhat_00004.1.el9eap
eap8-wildfly-java-jdk17< 0:8.0.5-5.GA_redhat_00004.1.el8eap | < 0:8.0.5-5.GA_redhat_00004.1.el9eap
eap8-wildfly-java-jdk21< 0:8.0.5-5.GA_redhat_00004.1.el8eap | < 0:8.0.5-5.GA_redhat_00004.1.el9eap
eap8-wildfly-modules< 0:8.0.5-5.GA_redhat_00004.1.el8eap | < 0:8.0.5-5.GA_redhat_00004.1.el9eap

Show all 46

Org.hornetq1 product

hornetq-core-client≤ 2.4.9

2 vendors · 47 products

References

33 links

github.com/JAckLosingHeart/CWE-378/blob/main/CVE-2024-51127.mdARTICLEWEBExploitMitigation
access.redhat.com/errata/RHSA-2024:11529Advisory
access.redhat.com/security/updates/classification/ARTICLE
docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4ARTICLE
docs.redhat.com/en/…ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=2323697REPORT
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_11529.jsonAdvisory
access.redhat.com/security/cve/CVE-2024-51127REPORT
www.cve.org/CVERecord?id=CVE-2024-51127Advisory
nvd.nist.gov/vuln/detail/CVE-2024-51127Advisory

Show all 33 references

hornetq.comARTICLEWEB
access.redhat.com/errata/RHSA-2025:0371Advisory
access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/8.0/ARTICLE
access.redhat.com/articles/7100137ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0371.jsonAdvisory
access.redhat.com/errata/RHSA-2025:1636Advisory
issues.redhat.com/browse/JBEAP-27610ARTICLE
issues.redhat.com/browse/JBEAP-28233ARTICLE
issues.redhat.com/browse/JBEAP-28359ARTICLE
issues.redhat.com/browse/JBEAP-28587ARTICLE
issues.redhat.com/browse/JBEAP-28691ARTICLE
issues.redhat.com/browse/JBEAP-28729ARTICLE
issues.redhat.com/browse/JBEAP-28730ARTICLE
issues.redhat.com/browse/JBEAP-29200ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1636.jsonAdvisory
access.redhat.com/errata/RHSA-2025:1637Advisory
issues.redhat.com/browse/JBEAP-28234ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1637.jsonAdvisory
access.redhat.com/errata/RHSA-2025:1638Advisory
issues.redhat.com/browse/JBEAP-28235ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1638.jsonAdvisory
github.com/darranl/hornetqPACKAGE
github.com/hornetq/…WEB

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities