Red Hat Security Advisory

RHSA-2022:6292

Red Hat AMQ Broker 7.8.7 release and security update

Released 2022-09-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat AMQ 7.8.7

Fixes 1 record

TI-2022-15956 CVE-2022-35278 · GHSA-cv6r-h2fm-pvrp

HTML Injection in ActiveMQ Artemis Web Console

LOW 31

In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01749 Published 2022-08-23 Fixed in 2.24.0 CWE-80