RHSA-2023:3185HighCVSS 8.1

Red Hat Security Advisory: Red Hat AMQ Broker 7.10.3 release and security update

Published
May 17, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (6)

CVE-2023-20861 →CVE-2022-3782 →CVE-2022-22970 →CVE-2022-22971 →CVE-2023-0482 →CVE-2023-20860 →

📋 Description

CVE-2022-3782 — keycloak: path traversal via double URL encoding CVE-2022-22970 — springframework: DoS via data binding to multipartFile or servlet part CVE-2022-22971 — springframework: DoS with STOMP over WebSocket CVE-2023-0482 — RESTEasy: creation of insecure temp files CVE-2023-20860 — springframework: Security Bypass With Un-Prefixed Double Wildcard Pattern CVE-2023-20861 — springframework: Spring Expression DoS Vulnerability

🎯 Affected products1

  • AMQ Broker 7.10.3

✅ Remediation

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings. The References section of this erratum contains a download link (you must log in to download the update).

🔗 References (11)