{"id":"CVE-2015-1830","aliases":["EUVD-2022-2240","GHSA-3v63-f83x-37x4"],"status":"published","title":"Improper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQ","description":"Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.84408,"percentile":0.99702,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-22"],"published":"2015-08-19T15:00:00Z","modified":"2026-06-17T00:23:04Z","exploits":[{"source":"exploitdb","id":"EDB-40857","title":"Apache ActiveMQ 5.11.1/5.13.2 - Directory Traversal / Command Execution","type":"remote","platform":"windows","date":"2015-08-17","verified":true,"url":"https://www.exploit-db.com/exploits/40857"},{"source":"exploitdb","id":"EDB-48181","title":"Apache ActiveMQ 5.x-5.11.1 - Directory Traversal Shell Upload (Metasploit)","type":"remote","platform":"windows","date":"2020-03-09","verified":true,"url":"https://www.exploit-db.com/exploits/48181"},{"source":"metasploit","id":"exploit/windows/http/apache_activemq_traversal_upload","title":"Apache ActiveMQ 5.x-5.11.1 Directory Traversal Shell Upload","type":"exploit","platform":"Windows","date":"2015-08-19","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/http/apache_activemq_traversal_upload"}],"fixes":[{"ecosystem":"Maven","package":"org.apache.activemq:activemq-client","fixed_in":["5.11.2"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.activemq:activemq-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"last_affected":"5.11.1"},{"fixed":"5.11.2"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.apache.activemq:activemq-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.11.2"}]}],"versions":["5.10.0","5.10.1","5.10.2","5.11.0","5.11.1","5.8.0","5.9.0","5.9.1"]}],"products":[{"vendor":"apache","product":"activemq"}],"references":[{"url":"http://activemq.apache.org/security-advisories.data/CVE-2015-1830-announcement.txt","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/76452","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-407","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-407/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securitytracker.com/id/1033315","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://packetstormsecurity.com/files/156643/Apache-ActiveMQ-5.11.1-Directory-Traversal-Shell-Upload.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1830","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2@%3Ccommits.activemq.apache.org%3E","tags":["web"]},{"url":"https://github.com/apache/activemq/commit/729c4731574ffffaf58ebefdbaeb3bd19ed1c7b7","tags":["web"]},{"url":"https://github.com/apache/activemq/commit/9fd5cb7dfe0fcc431f99d5e14206e0090e72f36b","tags":["web"]},{"url":"https://issues.apache.org/jira/browse/AMQ-5754","tags":["web"]},{"url":"https://github.com/advisories/GHSA-3v63-f83x-37x4"},{"url":"https://github.com/apache/activemq","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-1830","description":"Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.","status":"published","published":"2015-08-19T15:00:00Z","modified":"2024-08-06T04:54:16.298Z","updated_at":"2026-11-02T14:35:44.046042Z"}],"euvd":[{"id":"EUVD-2022-2240","description":"Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.","status":"published","published":"2015-08-19T15:00:00Z","modified":"2024-08-06T04:54:16Z","updated_at":"2026-11-03T02:22:13.664628Z"}],"ghsa":[{"id":"GHSA-3v63-f83x-37x4","title":"Improper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQ","description":"Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.","status":"published","published":"2022-05-14T01:14:51Z","modified":"2023-12-20T20:07:31Z","cwes":["CWE-22"],"updated_at":"2026-11-02T14:37:27.414424Z"}],"nvd":[{"id":"CVE-2015-1830","description":"Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.","status":"published","published":"2015-08-19T15:59:00.133Z","modified":"2026-06-17T00:23:04.703Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:03:08.998581Z"}],"osv":[{"id":"GHSA-3v63-f83x-37x4","title":"Improper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQ","description":"Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors.","status":"published","published":"2022-05-14T01:14:51Z","modified":"2024-12-07T05:40:38.265692Z","cwes":["CWE-22"],"updated_at":"2026-11-02T15:46:36.092962Z"}]}}