| HTML Injection in ActiveMQ Artemis Web Console (CVE-2022-35278) |
| PRODUCT AFFECTED: |
| This issue affects Apache ActiveMQ Artemis. |
| |
| PROBLEM: |
| An attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue. |
| |
| WORKAROUND: |
| |
| Upgrade to Apache ActiveMQ Artemis 2.24.0. |
| |
| Credit: |
| |
| Apache ActiveMQ would like to thank Yash Pandya (Digital14), Rajatkumar Karmarkar (Digital14), and Likhith Cheekatipalle (Digital14) for reporting this issue. |
| |
| MODIFICATION HISTORY: |
| : Initial Publication. |
| RELATED LINKS: |
| CVE-2022-35278 at cve.mitre.org |
