Cross-site scripting in Apache ActiveMQ
Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2010-0684US | low3.5 | — | ||
Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via th… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://activemq.apache.org/activemq-531-release.htmlWEB
- http://www.rajatswarup.com/CVE-2010-0684.txtWEB
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57397WEB
- https://github.com/apache/activemqWEB
- https://github.com/apache/activemq/commit/1f464b9412e1b1c08d40c8ffac40edd52731da48WEB
- https://github.com/apache/activemq/commit/2895197d0dad246757d8d1d9eea181cbf0543ae9WEB
- https://github.com/apache/activemq/commit/fed39c3619825bd92990cf1aa7a4e85119e00a6eWEB
- https://issues.apache.org/activemq/browse/AMQ-2613WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan