CVE-2020-13932

CVE-2020-13932: vulnerability in Apache ActiveMQ Artemis

Published · Updated

Follow this CVE+ Monitor Apache ActiveMQ Artemis+ Monitor org.apache.activemq:apache-artemis

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 4.3%
In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability. The XSS payload is being injected into the admin console's browser. The XSS payload is triggered in the diagram plugin; queue node and the info section.
Affected products
n/a · Apache ActiveMQ Artemis