title: HTML Injection in ActiveMQ Artemis Web Console
description: In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.
problem types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
affected:
{
vendor: Apache Software Foundation
product: Apache ActiveMQ Artemis
versions:
version: unspecified, lessThanOrEqual: 2.23.1, status: affected, versionType: custom
}
workarounds: Upgrade to Apache ActiveMQ Artemis 2.24.0.