GitHub Advisoryadvisory · Maven

GHSA-mfhr-3xmc-r2gg Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

MEDIUM Published 2022-05-17 Modified 2023-12-20 Official page ↗
Aliases
CVE-2013-1879
Ecosystem
Maven
Packages
org.apache.activemq:activemq-client
Severity
Moderate
Weaknesses
CWE-79
Reviewed
2022-07-08

Affected packages

• Maven org.apache.activemq:activemq-client: < 5.9.0 → fixed in 5.9.0

Description

Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a message."

Related

Alias · CVE (1)

  • CVE-2013-1879 Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References