[AMQ-8564] Zero-Day Vulnerability in Spring Framework - CVE-2022-22965

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 5.16.4
• Assignee: Unassigned
• Reporter: Imran Ali
• Created: 01/Apr/22 17:37
• Updated: 05/Apr/22 05:01
• Resolved: 05/Apr/22 05:01

Description

Hi Team, 

I wanted a confirmation on the recent vulnerability found under Spring Framework. Is this vulnerability impacts Active MQ? If so, what is the recommended workaround to mitigate this vulnerability. 

 

Issue Links

• is duplicated by: AMQ-8565 Upgrade to Spring 5.3.18