Description
In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.
Remediation
References
https://lists.apache.org/thread/bh6y81wtotg75337bpvxcjy436zfgf3n
https://security.netapp.com/advisory/ntap-20221209-0005/
Related Vulnerabilities
CVE-2020-19698 Vulnerability in npm package editor.md
CVE-2022-28220 Vulnerability in maven package org.apache.james.protocols:protocols-api
CVE-2022-25940 Vulnerability in maven package org.webjars.npm:lite-server
CVE-2020-15174 Vulnerability in maven package org.webjars.npm:electron
CVE-2021-26117 Vulnerability in maven package org.apache.activemq:artemis-server