Not rated
CVE-2022-35278 In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a…
Description
In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache ActiveMQ Artemis 2.23 | earliest → 2.23.1 | No fix stated |
References
- lists.apache.org lists.apache.org
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of Apache ActiveMQ Artemis
The 15 CVEs of Apache ActiveMQ Artemis →
CVE-2026-49362
An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized…
Not rated
CVE-2026-49363
An unauthenticated remote attacker connecting with the CORE protocol can discover cluster node details by sending a…
Not rated
CVE-2026-49364
An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials during…
Not rated
CVE-2026-57822
When the broker is processing message-based management requests, sent by an authenticated messaging client that is…
Not rated