Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2010-0684
3.5
LOWCVSS v2
Published
April 5, 2010
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.
apache/activemq
GitHubApache ActiveMQ
GitHubApache ActiveMQ= 4.1.0, = 1.2, = 1.5, = 3.2.1, = 1.3, = 3.2, = 2.1, = 5.2.0, = 3.1, <= 5.3.0, = 4.0.1, = 4.0, = 3.0, = 2.0, = 5.1.0, = 4.0.2, = 1.1, = 5.0.0, = 4.1.1, = 3.2.2, = 1.4NVD