A directory traversal flaw exists in the fileserver upload and download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 on Windows. An attacker with remote access, through unspecified vectors, can create JSP files in arbitrary directories.
Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.
Public exploit code (Exploit-DB) was available 2 days before disclosure.
2 related vulnerabilities in the same code over 9 months. The latest fix listed for activemq-client is 5.13.2.
Why these are linked: Link confidenceHow strong the evidence is that two CVEs are related. High: stated in the CVE text or linked in an advisory, or the same code was patched one release apart. Medium: the same code, or a version step plus a similar description. Low: similar description only.
No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.
1 package in 1 ecosystem. Main package: org.apache.activemq:activemq-client.
Upgrade to 5.15.16 or later
Fixes this CVE and 2 other known vulnerabilities in this package (CVE-2016-3088, CVE-2023-46604).
Set the version to 5.15.16 or later in your pom.xml or build.gradle.
First fixed in 5.11.2 for CVE-2015-1830.
| If you run | Upgrade to |
|---|---|
| 5.0.0 up to 5.11.2 | 5.15.16first fix for this CVE: 5.11.2 |
“Up to” means the second version is the fix and is not affected.