Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-5254
7.5
HIGHCVSS v2
Published
January 8, 2016
Affected
3 projects
Assigned by
Red Hat
Severity scale
010
Description
Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.
apache/activemq
GitHubApache ActiveMQ
GitHubApache ActiveMQ= 5.3.0, = 5.11.1, = 5.8.0, = 5.4.3, = 5.4.0, = 5.5.1, = 5.12.0, = 5.4.1, = 5.9.0, = 5.7.0, = 5.6.0, = 5.3.1, = 5.10.1, = 5.10.0, = 5.3.2, = 5.11.0, = 5.10.2, = 5.5.0, = 5.2.0, = 5.12.1, = 5.1.0, = 5.0.0, = 5.9.1, = 5.11.2NVD
NPM
RubyGems