Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-35278

HTML Injection in ActiveMQ Artemis Web Console

Description

In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache ActiveMQ Artemis

  • unspecified to ≤ 2.23.1affected

References