imPC@ndo IT

Tracker / CVE-2022-35278

CVE-2022-35278

Medium 6.1

In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.

Affected products and versions

apache artemis · … → 2.24.0
netapp active_iq_unified_manager
netapp oncommand_workflow_automation

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References