Hi! We are wondering the extent of the danger from the usage of xstream in ActiveMQ prior to 5.16.
Is it related only to the ActiveMQ web console? Does ActiveMQ use blacklists or whitelists? Is there a way to avoid the security issues posed by the usage of xstream while using the versions of ActiveMQ in which xstream is used? -Doug