- Vendor / Project
- Apache
- Product
- ActiveMQ
- Date added
- Feb 10, 2022
- Due date
- Aug 10, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-20
Description
The Fileserver web application in Apache ActiveMQ allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request
Required action
Apply updates per vendor instructions.