漏洞描述
Apache ActiveMQ是美国阿帕奇（Apache）软件基金会的一套开源的消息中间件，它支持Java消息服务、集群、SpringFramework等。Apache ActiveMQ for Windows 5.11.2之前5.x版本的fileserver upload/downloadfor blob messages功能中存在目录遍历漏洞。远程攻击者可利用该漏洞在任意目录下创建JSP文件。
ActiveMQ for window 存在路径遍历导致未经身份验证的远程命令执行漏洞（CVE-2015-1830）
PoC代码
暂无相关漏洞推荐
-
CVE-2016-3088: ActiveMQ Arbitrary File Write Vulnerability (CVE-2016-3088) POC
2025-09-01 | ActiveMQThe Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to uploa... -
CVE-2023-46604: Apache ActiveMQ RCE POC
2025-09-01 | Apache ActiveMQApache ActiveMQ RCE Fofa: -
activemq-default-password: ActiveMQ Default Password POC
2025-09-01 | ActiveMQApache ActiveMQ default login information was discovered. -
CVE-2015-1427: ElasticSearch - Remote Code Execution POC
2025-09-01 | ElasticSearchElasticSearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox prot... -
CVE-2015-3337: Elasticsearch CVE-2015-3337 POC
2025-09-01 | Elasticsearchfofa app="elastic-Elasticsearch"