Apache ActiveMQ Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet
Moderate severity
GitHub Reviewed
Published
May 17, 2022
to the GitHub Advisory Database
•
Updated Dec 20, 2023
Description
Published by the National Vulnerability Database
Feb 5, 2014
Published to the GitHub Advisory Database
May 17, 2022
Reviewed
Aug 17, 2023
Last updated
Dec 20, 2023
Credits
-
sunSUNQ Analyst
Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet in the demo web application in Apache ActiveMQ before 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the refresh parameter to demo/portfolioPublish, a different vulnerability than CVE-2012-6092.
References