Main
Vulnerability Database
Exploits
ID:5745 - Exploit for Path traversal in ActiveMQ - CVE-2015-1830
ID:5745 - Exploit for Path traversal in ActiveMQ - CVE-2015-1830
Published: June 17, 2021
Vulnerability identifier: #VU25819
Vulnerability risk: Low
CVE-ID: CVE-2015-1830
CWE-ID: CWE-22
Exploitation vector: Remote access
Vulnerable software:
ActiveMQ
ActiveMQ
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to perform directory traversal attacks.
The vulnerability exists due to input validation error when processing directory traversal sequences in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows. A remote authenticated attacker can send a specially crafted HTTP request and remote attackers to create JSP files in arbitrary directories via unspecified vectors.
Remediation
Install update from vendor's website.