CVE-2015-1830

Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

84.41% chance of exploitation in the next 30 days, 100th percentile

Published

2015-08-19

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/apache_activemq_tra…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/48181
• https://www.exploit-db.com/exploits/40857

Exploit collections (1)

• （CVE-2015-1830）ActiveMQ 路径遍历导致未经身份验证的rcehelloexp/0day

Security advisories

• advisories/GHSA-3v63-f83x-37x4
• http://www.securityfocus.com/bid/76452

References

• CVE Record
• NVD entry