ActiveMQ Upgrade & Patching Strategy: The Expert Guide
On October 27, 2023, the Apache Software Foundation published CVE-2023-46604, a CVSS 10.0 remote code execution vulnerability in Apache ActiveMQ that allowed unauthenticated attackers to execute arbitrary code by exploiting the OpenWire protocol's ClassInfo deserialization.