Description
In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.
Remediation
References
https://lists.apache.org/thread/bh6y81wtotg75337bpvxcjy436zfgf3n
https://security.netapp.com/advisory/ntap-20221209-0005/
Related Vulnerabilities
CVE-2020-2290 Vulnerability in maven package org.biouno:uno-choice
CVE-2023-33510 Vulnerability in maven package org.jeecgframework.p3:jeecg-p3-biz-chat
CVE-2016-4434 Vulnerability in maven package org.apache.tika:tika-bundle
CVE-2019-16556 Vulnerability in maven package org.jenkins-ci.plugins:rundeck
CVE-2020-2184 Vulnerability in maven package org.jenkins-ci.plugins:cvs