CVE-2010-0684 — Cross-site Scripting in Apache Activemq

CWE-79 — Cross-site Scripting7 documents7 sources
Severity
3.5LOWNVD
EPSS
0.4%
top 40.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apache Activemq
Timeline
PublishedApr 5
Latest updateMay 2

Description

Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages1 packages

▶NVDapache/activemq5.3.0+20

Patches

Patch: activemq.apache.org ↗Patch: www.securityfocus.com ↗Patch: activemq.apache.org ↗

🔴Vulnerability Details

3
OSV
Cross-site scripting in Apache ActiveMQ↗2022-05-02
▶
GHSA
Cross-site scripting in Apache ActiveMQ↗2022-05-02
▶
CVEList
CVE-2010-0684: Cross-site scripting (XSS) vulnerability in createDestination↗2010-04-05
▶

💥Exploits & PoCs

1
Exploit-DB
MaxDB WebDBM - GET Buffer Overflow (Metasploit)↗2010-05-09
▶

📋Vendor Advisories

1
Red Hat
ActiveMQ: XSS in createDestination↗2010-02-17
▶

💬Community

1
Bugzilla
CVE-2010-0684 ActiveMQ: XSS in createDestination↗2010-04-09
▶
CVE-2010-0684 — Cross-site Scripting in Apache Activemq | cvebase