CVE-2010-0684

Publicada em 05 abr 2010 · Atualizada em 07 ago 2024

Seguir esta CVE + Monitorar org.apache.activemq:activemq-parent

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 4.3%

Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.

Produtos afetados

n/a · n/a

Referências

http://activemq.apache.org/activemq-531-release.html http://secunia.com/advisories/39223 http://securitytracker.com/id?1023778 https://exchange.xforce.ibmcloud.com/vulnerabilities/57397 https://issues.apache.org/activemq/browse/AMQ-2613 https://issues.apache.org/activemq/browse/AMQ-2625 http://www.rajatswarup.com/CVE-2010-0684.txt http://www.securityfocus.com/archive/1/510419/100/0/threaded http://www.securityfocus.com/bid/39119