[AMQ-9196] ActiveMQ jar bundled with Xsteam library is vulnerable which should upgrade to Xstream 1.4.20 (CVE-2022-41966)

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 5.17.3
• Fix Version/s: 5.18.0, 5.17.4
• Component/s: Broker
• Assignee: Jean-Baptiste Onofré
• Reporter: Kishore KN
• Created: 13/Jan/23 10:09
• Updated: 02/Feb/23 13:38
• Resolved: 02/Feb/23 13:38

Description

ActiveMQ jar bundled with Xsteam library is vulnerable which should upgrade to Xstream 1.4.20 (CVE-2022-41966)

Issue Links

• is duplicated by: AMQ-9208 Upgrade xstream to 1.4.20