GitHub Advisoryadvisory · Maven

GHSA-c9gx-27hq-wcvj Apache ActiveMQ Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet

MEDIUM Published 2022-05-17 Modified 2023-12-20 Official page ↗
Aliases
CVE-2013-1880
Ecosystem
Maven
Packages
org.apache.activemq:activemq-core
Severity
Moderate
Weaknesses
CWE-79
Reviewed
2023-08-17

Affected packages

• Maven org.apache.activemq:activemq-core: < 5.9.0 → fixed in 5.9.0

Description

Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet in the demo web application in Apache ActiveMQ before 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the refresh parameter to demo/portfolioPublish, a different vulnerability than CVE-2012-6092.

Related

Alias · CVE (1)

  • CVE-2013-1880 Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet in the demo web application in Apache ActiveMQ before 5.9.0… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References