Archive
27 September 2016
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
High 7.2
Apache ActiveMQ Artemis RCE Via Deserialization Gadget Chain
The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Art…