CVE-2015-1830

The record

Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.

Affected packages

Related vulnerabilities

• CVE-2015-7559 It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown… Also affects org.apache.activemq:activemq-client
• CVE-2016-3088 The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote… Also affects org.apache.activemq:activemq-client
• CVE-2015-5254 Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in… Also affects org.apache.activemq:activemq-client
• CVE-2014-3576 The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ… Also affects org.apache.activemq:activemq-client
• CVE-2026-81163 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')… CWE-22
• CVE-2026-112049 Vita3K before build 4187 contains a path traversal (zip slip) vulnerability in… CWE-22
• CVE-2026-112005 WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote… CWE-22
• CVE-2026-61702 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… CWE-22