Skip to content
OpenAdvisories

Archive

27 September 2016

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.2

    Apache ActiveMQ Artemis RCE Via Deserialization Gadget Chain

    The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Art…