Maven/org.apache.activemq:artemis-core-client CVE-2022-23913: high 7.5, EPSS 2.74%

Apache ActiveMQ Artemis Uncontrolled Resource Consumption (DoS)

Action: Upgrade org.apache.activemq:artemis-core-client to 2.19.1 or later.

Affected

Fixed versions

Sources

• osv: GHSA-pr38-qpxm-g88x
• https://nvd.nist.gov/vuln/detail/CVE-2022-23913
• https://github.com/github/codeql-java-CVE-coverage/issues/1061
• https://github.com/apache/activemq-artemis/pull/3862
• https://github.com/apache/activemq-artemis/pull/3862/commits/1f92368240229b8f5db92a92a72c703faf83e9b7
• https://github.com/apache/activemq-artemis/pull/3871
• https://github.com/apache/activemq-artemis/pull/3871/commits/153d2e9a979aead8dff95fbc91d659ecc7d0fb82
• https://github.com/apache/activemq-artemis
• https://issues.apache.org/jira/browse/ARTEMIS-3593
• https://lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2
• https://security.netapp.com/advisory/ntap-20220303-0003

CVE-2022-23913 · published 2022-02-06T00:00:55Z · modified 2026-07-08T17:32:03Z · JSON