Cross-site scripting in Apache ActiveMQ
Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2010-0684US | low3.5 | — | ||
Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via th… | ||||
02
references
External citations — patches, advisories, analysis.
- http://activemq.apache.org/activemq-531-release.htmlWEB
- http://www.rajatswarup.com/CVE-2010-0684.txtWEB
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57397WEB
- https://github.com/apache/activemqWEB
- https://github.com/apache/activemq/commit/1f464b9412e1b1c08d40c8ffac40edd52731da48WEB
- https://github.com/apache/activemq/commit/2895197d0dad246757d8d1d9eea181cbf0543ae9WEB
- https://github.com/apache/activemq/commit/fed39c3619825bd92990cf1aa7a4e85119e00a6eWEB
- https://issues.apache.org/activemq/browse/AMQ-2613WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan