Описание
In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| activemq | fixed | 5.16.0-1 | package |
Примечания
Admin console not enabled in the Debian package, see #702670)
https://activemq.apache.org/security-advisories.data/CVE-2020-1941-announcement.txt
Fixed in 5.15.12
EPSS
Связанные уязвимости
In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.
In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.
In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.
Apache ActiveMQ webconsole admin GUI is open to XSS
Уязвимость веб-консоли администратора программной платформы Apache ActiveMQ, позволяющая нарушителю осуществлять межсайтовые сценарные атаки
EPSS