CVE-2010-0684

Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.

Affected products

Apache Activemq

Apache Activemq

≤ 5.3.0, 1.1, 1.2, 1.3, 1.4, 1.5, 2.0, 2.1, 3.0, 3.1, 3.2, 3.2.1, 3.2.2, 4.0, 4.0.1, 4.0.2, 4.1.0, 4.1.1, 5.0.0, 5.1.0, 5.2.0

Fix

Available

CVSS 2.0

3.5 LOW

EPSS

4.3% (90th percentile)

Weakness

CWE-79

NVD status

Modified

Published

2010-04-05