ActiveMQ_CVE-2015-5254

ActiveMQ 역직렬화CVE-2015-5254 취약점 설명: Apache ActiveMQ 5.13.0 이전 5.x 버전에는 보안 취약점이 존재합니다. 이 취약점은 프로그램이 브로커broker에서 직렬화할 수 있는 클래스를 제한하지 않는 데서 발생합니다. 원격 공격자는 특수하게 조작된 직렬화된 Java Message ServiceJMS ObjectMessage 객체를 이용해 이 취약점을 악용하여 임의 코드를 실행할 수 있습니다. 영향받는 버전: Apache ActiveMQ 5.13.0 이전의 5.x 버전 0x01 관리 콘솔에...

Exploitation-de-la-vuln-rabilit-CVE-2015-5254-

CVE-2015-5254 취약점 악용 CVE-2015-5254 취약점은 오픈 소스 메시징 서버인 Apache ActiveMQ의 보안 결함으로, 애플리케이션 간 통신에 널리 사용됩니다. 이 취약점은 ActiveMQ 5.13.0 이하 버전에 영향을 미치며, 전송된 JMS ObjectMessage 입력 데이터에 대한 필터링 부재로 인해 발생합니다. 네트워크 스캔: nmap -p 61616 -Pn -T5 -n -sC -sV 172.17.0.1 다운로드한 폴더에서 docker를 사용하여 actiiveMQ 2015를 실행합니다:...

CVE-2026-40860

camel-jms JMS ObjectMessage 안전하지 않은 역직렬화 재현 도구 CVE-2026-40860 이 프로젝트는 Apache Camel의 camel-jms 구성 요소그리고 전이적으로 camel-sjms, camel-sjms2, camel-amqp, camel-activemq, camel-activemq6에서 CVE-2026-40860 으로 추적되는 Java 역직렬화 취약점 을 시연합니다. JmsBinding.extractBodyFromJms는 수신된 JMS ObjectMessage의 페이로드를...

CVE-2026-43866

camel-jms 위조된 DefaultExchangeHolder 필터 우회 재현기 CVE-2026-43866 이 프로젝트는 Apache Camel의 camel-jms및 camel-sjms / JMS 계열 컴포넌트에서 CVE-2026-40860 수정을 우회하는 CVE-2026-43866 을 시연합니다. CVE-2026-40860은 수신되는 JMS ObjectMessage 페이로드에 역직렬화 후 클래스 허용 목록java.;javax.;org.apache.camel.;!을 추가했습니다. 그러나...

org.apache.cxf/cxf: Apache CXF: Remote Code Execution via unsafe deserialization of JMS ObjectMessage

A flaw was found in Apache CXF. The Java Message Service JMS transport component improperly deserializes inbound JMS ObjectMessages without type restrictions. A remote attacker can exploit this by sending a specially crafted message to the service's JMS destination. This vulnerability could lead ...

CLEANSTART-2026-TK74523 Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserialization, with no type restrictions in place

Security vulnerability affects the wildfly package. Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserialization, with no type restrictions in place...

Deserialization Of Untrusted Data

Apache CXF is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to native Java deserialization of inbound JMS ObjectMessage objects without type restrictions, which allows an attacker who can place messages on the JMS destination to submit malicious serialized objects that...

CVE-2026-86404

EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject uses ObjectInputStreamWithClassLoader, which implements allow-list/block-list filtering via its checkSecurity/isTrustedType method. However, by default both allow-list and block-list are empty...

CVE-2026-86404 Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by default

EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject uses ObjectInputStreamWithClassLoader, which implements allow-list/block-list filtering via its checkSecurity/isTrustedType method. However, by default both allow-list and block-list are empty...

CVE-2026-86404 Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by default

EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject uses ObjectInputStreamWithClassLoader, which implements allow-list/block-list filtering via its checkSecurity/isTrustedType method. However, by default both allow-list and block-list are empty...

EUVD-2026-72352

EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject uses ObjectInputStreamWithClassLoader, which implements allow-list/block-list filtering via its checkSecurity/isTrustedType method. However, by default both allow-list and block-list are empty...

CVE-2026-86404

EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject uses ObjectInputStreamWithClassLoader, which implements allow-list/block-list filtering via its checkSecurity/isTrustedType method. However, by default both allow-list and block-list are empty...

PT-2026-86687

Name of the Vulnerable Software and Affected Versions Red Hat EAP Artemis affected versions not specified Description Red Hat EAP Artemis contains a flaw where the deserialization configuration permits the deserialization of all classes by default. The ObjectMessage.getObject function utilizes...

CVE-2026-66909

A flaw was found in Apache CXF. The Java Message Service JMS transport component improperly deserializes inbound JMS ObjectMessages without type restrictions. A remote attacker can exploit this by sending a specially crafted message to the service's JMS destination. This vulnerability could lead ...

camel-jms: Apache Camel JMS components: Arbitrary Exchange state injection

A flaw was found in Apache Camel JMS components. A remote attacker can exploit a deserialization vulnerability by sending a specially crafted ObjectMessage to a queue or topic consumed by an affected Camel application. This bypasses existing security checks, allowing the attacker to inject...

artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in Red Hat EAP permit deserialization by default

EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject uses ObjectInputStreamWithClassLoader, which implements allow-list/block-list filtering via its checkSecurity/isTrustedType method. However, by default both allow-list and block-list are empty...

artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in Red Hat EAP permit deserialization by default

EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject uses ObjectInputStreamWithClassLoader, which implements allow-list/block-list filtering via its checkSecurity/isTrustedType method. However, by default both allow-list and block-list are empty...

Deserialization Of Untrusted Data

Apache Camel is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to improper deserialization of a crafted JMS ObjectMessage containing an allowed DefaultExchangeHolder object, which bypasses the CVE-2026-40860 class check and allows an attacker who can publish messages to...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the deserialization process of inbound JMS ObjectMessage using native Java deserialization without type restrictions. An attacker can execute arbitrary code or cause a denial of service by submitting...

CVE-2026-66909 Apache CXF: Unsafe deserialization of inbound JMS ObjectMessage

Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserialization, with no type restrictions in place. Any attacker able to place a message on the service's JMS destination can submit a malicious serialized object, leading to denial of service or,...