Cross-site request forgery in Apache ActiveMQ
Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue action.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2010-1244US | medium6.8 | — | ||
Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified vict… | ||||
02
references
External citations — patches, advisories, analysis.
- http://activemq.apache.org/activemq-531-release.htmlWEB
- http://secunia.com/advisories/39223WEB
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57398WEB
- https://github.com/apache/activemqWEB
- https://github.com/apache/activemq/commit/1f464b9412e1b1c08d40c8ffac40edd52731da48WEB
- https://github.com/apache/activemq/commit/f3d4034e2a7cee7b1f88c7e6b0d1d69458e1bcf0WEB
- https://issues.apache.org/activemq/browse/AMQ-2613WEB
- https://issues.apache.org/activemq/browse/AMQ-2625WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan