exploitDog

CVE-2010-0684

Опубликовано: 17 фев. 2010

Источник: redhat

CVSS2: 5.5

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.

Отчет

Not vulnerable. Apache ActiveMQ is not shipped with any supported Red Hat products.

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2010-0684
https://nvd.nist.gov/vuln/detail/CVE-2010-0684

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=580882ActiveMQ: XSS in createDestination

EPSS

Процентиль: 91%

0.04283

Низкий

5.5 Medium

CVSS2

Связанные уязвимости

CVE-2010-0684

nvd

больше 16 лет назад

Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.

GHSA-mxf7-pv8q-294h

github

больше 4 лет назад

Cross-site scripting in Apache ActiveMQ

EPSS

Процентиль: 91%

0.04283

Низкий

5.5 Medium

CVSS2