RockteMQ-AI commented on issue #2337: URL: https://github.com/apache/rocketmq-dashboard/issues/2337#issuecomment-5323889904
**Issue Evaluation** Category: (security) | Status: **Needs Info** Thank you for reporting this concern about message ID address validation. After reviewing the current codebase on the branch, I could not find the described components: - No "AI message query and trace tools" or "Apache message provider" exist in the codebase. - The existing uses the standard RocketMQ admin API () to look up messages by ID — it does not decode IP addresses from message IDs or make arbitrary remoting connections based on decoded addresses. - Message trace viewing () also uses standard admin APIs. Could you clarify: - [ ] Which version/tag or branch contains the "AI message query" feature? - [ ] Is this based on a planned PR or external integration? Without the relevant code path, I cannot verify the reported vulnerability. --- *Automated evaluation by RockteMQ-AI* -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
