tocsin

Debian/activemq: critical 9.8

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

Action: Upgrade activemq to 5.14.0+dfsg-1 or later.

Affected

introducedfixedlast affected
05.14.0+dfsg-1-

Fixed versions

5.14.0+dfsg-1

Sources

published · modified · JSON