It seems to be a RocketMQ vuln; it's described further down the page.