Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-1880
4.3
MEDIUMCVSS v2
Published
February 5, 2014
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet in the demo web application in Apache ActiveMQ before 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the refresh parameter to demo/portfolioPublish, a different vulnerability than CVE-2012-6092.
apache/activemq
GitHubApache ActiveMQ
GitHubApache ActiveMQ= 5.3.0, = 5.4.0, = 5.5.1, = 5.4.1, = 5.3.1, = 5.2.0, = 5.7.0, = 5.0.0, = 5.1.0, = 5.6.0, <= 5.8.0, = 5.3.2, = 5.5.0, = 5.4.2NVD