Description

The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Artemis broker to deserialize arbitrary objects and execute arbitrary code by leveraging gadget classes being present on the Artemis classpath.

Remediation

References

CVE-2016-4978

Related Vulnerabilities

Oracle Database Server CVE-2009-1018 Vulnerability (CVE-2009-1018)

Plone CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-5493)

GibbonEdu Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-22868)

Liferay Portal Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-42123)

WordPress Plugin Broken Link Checker Cross-Site Scripting (1.11.19)

Severity

High

Classification

CVE-2016-4978 CWE-502 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities