{"id":"CVE-2015-1830","published":"2015-08-19T15:00:00Z","modified":"2024-08-06T04:54:16Z","title":"Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.","provenance":"source","from":"CVE.org"},"summary":{"text":"A directory traversal flaw exists in the fileserver upload and download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 on Windows. An attacker with remote access, through unspecified vectors, can create JSP files in arbitrary directories.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:19:28Z"},"cvss":null,"epss":{"score":0.84408,"percentile":0.99698,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://activemq.apache.org/security-advisories.data/CVE-2015-1830-announcement.txt","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/76452","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-407","tags":["x_refsource_MISC"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-407/","tags":["x_refsource_MISC"]},{"url":"http://www.securitytracker.com/id/1033315","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://packetstormsecurity.com/files/156643/Apache-ActiveMQ-5.11.1-Directory-Traversal-Shell-Upload.html","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"Maven","package":"org.apache.activemq:activemq-client","vulnerableRanges":[">=5.0.0, <5.11.2"],"patched":["5.11.2"],"from":["GHSA-3v63-f83x-37x4"],"provenance":"source"}],"advisories":[{"id":"GHSA-3v63-f83x-37x4","url":"https://github.com/advisories/GHSA-3v63-f83x-37x4","severity":"MODERATE","ecosystem":"Maven","package":"org.apache.activemq:activemq-client","vulnerableRanges":[">=5.0.0, <5.11.2"],"patched":["5.11.2"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2022-2240","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-2240","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":40857,"url":"https://www.exploit-db.com/exploits/40857","title":"Apache ActiveMQ 5.11.1/5.13.2 - Directory Traversal / Command Execution","type":"remote","platform":"windows","date":"2015-08-17","verified":true,"provenance":"source"},{"id":48181,"url":"https://www.exploit-db.com/exploits/48181","title":"Apache ActiveMQ 5.x-5.11.1 - Directory Traversal Shell Upload (Metasploit)","type":"remote","platform":"windows","date":"2020-03-09","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":2,"earliest":"2015-08-17"},"metasploit":[{"name":"Apache ActiveMQ 5.x-5.11.1 Directory Traversal Shell Upload","module":"exploit/windows/http/apache_activemq_traversal_upload","type":"exploit","disclosureDate":"2015-08-19","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/apache_activemq_traversal_upload.rb"}],"first":{"date":"2015-08-17","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/40857"},"provenance":"source"},"exploitRefs":["http://packetstormsecurity.com/files/156643/Apache-ActiveMQ-5.11.1-Directory-Traversal-Shell-Upload.html"],"flow":[],"timeline":[{"date":"2015-08-17","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-40857); later: Metasploit 2015-08-19","url":"https://www.exploit-db.com/exploits/40857","provenance":"source"},{"date":"2015-08-19","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2015-1830","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":24.9,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.94,"detail":"percentile 0.9970"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 Exploit-DB entries; 1 NVD exploit link; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-apache-activemq-cve-2015-1830","children":[{"from":"CVE-2015-1830","to":"CVE-2016-3088","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["activemq-fileserver/src/main/java/org/apache/activemq/util/FilenameGuardFilter.java","activemq-fileserver/src/main/webapp/index.html"],"commits":["https://github.com/apache/activemq/commit/729c4731574ffffaf58ebefdbaeb3bd19ed1c7b7","https://github.com/apache/activemq/commit/9fd5cb7dfe0fcc431f99d5e14206e0090e72f36b","https://github.com/apache/activemq/commit/3dd86d04e8b90ba309819317d19e7260d414d9e7"],"basis":"rarely changed file"},{"kind":"similar","provenance":"machine","score":0.4,"basis":"same package + description similarity"}]}],"packageHistory":[{"cve":"CVE-2014-3600","published":"2017-10-27","fixed":"5.10.1","kev":false},{"cve":"CVE-2014-8110","published":"2015-02-12","fixed":"5.10.1","kev":false},{"cve":"CVE-2014-3576","published":"2015-08-14","fixed":"5.11.0","kev":false,"link":{"from":"CVE-2014-3576","to":"CVE-2015-1830","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.activemq:activemq-client","fromFixed":"5.11.0","toFixed":"5.11.2","daysApart":5}]}},{"cve":"CVE-2015-1830","published":"2015-08-19","fixed":"5.11.2","kev":false},{"cve":"CVE-2015-5254","published":"2016-01-08","fixed":"5.12.2","kev":false,"link":{"from":"CVE-2015-1830","to":"CVE-2015-5254","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.activemq:activemq-client","fromFixed":"5.11.2","toFixed":"5.11.3","daysApart":142}]}},{"cve":"CVE-2016-0734","published":"2016-04-07","fixed":"5.13.2","kev":false},{"cve":"CVE-2016-0782","published":"2016-08-05","fixed":"5.13.2","kev":false}],"package":"Maven:org.apache.activemq:activemq-client"}}