org.apache.activemq:activemq-web@5.19.2
latest version
6.2.5
latest non vulnerable version
first published
19 years ago
latest version published
18 days ago
licenses detected
- [4.1.1,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the org.apache.activemq:activemq-web package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
org.apache.activemq:activemq-web is a message broker and JMS 1.1 implementation. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the JMS selector field in the web console. An attacker can display malicious content in the browser by injecting HTML and overriding the content type to HTML when browsing queues. Note: This is only exploitable if the attacker is authenticated and able to access the web console. How to fix Cross-site Scripting (XSS)? Upgrade | [,5.19.6)[6.0.0,6.2.5) |
org.apache.activemq:activemq-web is a message broker and JMS 1.1 implementation. Affected versions of this package are vulnerable to Directory Traversal via improper validation of classpath path names in the Note: Due to a path separator resolution bug, Windows users are recommended to upgrade to versions 5.19.4 and 6.2.3. How to fix Directory Traversal? Upgrade | [,5.19.3)[6.0.0,6.2.2) |