GitHub Advisoryadvisory · Maven

GHSA-9cvr-8xq4-2m73 Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

MEDIUM Published 2022-05-14 Modified 2024-03-14 Official page ↗
Aliases
CVE-2014-8110
Ecosystem
Maven
Packages
org.apache.activemq:activemq-client
Severity
Moderate
Weaknesses
CWE-79
Reviewed
2022-07-06

Affected packages

• Maven org.apache.activemq:activemq-client: >= 5.0.0, < 5.10.1 → fixed in 5.10.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2014-8110 Multiple cross-site scripting (XSS) vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References