Apache ActiveMQ Improper Input Validation Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 10/02/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.activemq:activemq-client | ≥ 5.0.0, < 5.14.0 | 5.14.0 |
| activemq | ≥ 5.0.0, < 5.14.0 | 5.14.0 |
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free