RHSA-2023:1661HighCVSS 8.1

Red Hat Security Advisory: Red Hat AMQ Broker 7.11.0 release and security update

Published
April 5, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (5)

CVE-2022-1278 →CVE-2022-2047 →CVE-2022-3782 →CVE-2022-22970 →CVE-2022-22971 →

📋 Description

CVE-2022-1278 — WildFly: possible information disclosure CVE-2022-2047 — jetty-http: improver hostname input handling CVE-2022-3782 — keycloak: path traversal via double URL encoding CVE-2022-22970 — springframework: DoS via data binding to multipartFile or servlet part CVE-2022-22971 — springframework: DoS with STOMP over WebSocket

🎯 Affected products1

  • AMQ Broker 7.11.0

✅ Remediation

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings. The References section of this erratum contains a download link (you must log in to download the update).

🔗 References (10)