In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.
References
| Link | Resource |
|---|---|
| https://lists.apache.org/thread/bh6y81wtotg75337bpvxcjy436zfgf3n | Mailing List Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20221209-0005/ | Third Party Advisory |
Configurations
History
13 Dec 2022, 01:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://security.netapp.com/advisory/ntap-20221209-0005/ - Third Party Advisory | |
| CPE | cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:* |
|
| First Time |
Netapp oncommand Workflow Automation
Netapp active Iq Unified Manager Netapp |
09 Dec 2022, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
25 Aug 2022, 02:07
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Apache activemq Artemis
Apache |
|
| CWE | CWE-79 | |
| References | (MISC) https://lists.apache.org/thread/bh6y81wtotg75337bpvxcjy436zfgf3n - Mailing List, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| CPE | cpe:2.3:a:apache:activemq_artemis:*:*:*:*:*:*:*:* |
23 Aug 2022, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-08-23 15:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-35278
Mitre link : CVE-2022-35278
CVE.ORG link : CVE-2022-35278
JSON object : View
Products Affected
apache
- activemq_artemis
netapp
- oncommand_workflow_automation
- active_iq_unified_manager