CVE-2022-41678 | Apache ActiveMQ up to 5.16.5/5.17.3 deserialization

A vulnerability has been found in Apache ActiveMQ up to 5.16.5/5.17.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/jolokia org.jolokia.http.HttpRequestHandler#handlePostRequest. The manipulation leads to deserialization.

This vulnerability is known as CVE-2022-41678. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.