GHSA-9cvr-8xq4-2m73

Source

https://github.com/advisories/GHSA-9cvr-8xq4-2m73

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9cvr-8xq4-2m73/GHSA-9cvr-8xq4-2m73.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-9cvr-8xq4-2m73

Aliases

CVE-2014-8110

Published

2022-05-14T01:14:52Z

Modified

2024-12-03T06:08:57.066980Z

Summary

Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

Details

Multiple cross-site scripting (XSS) vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Database specific

{
    "github_reviewed": true,
    "severity": "MODERATE",
    "github_reviewed_at": "2022-07-06T21:04:31Z",
    "nvd_published_at": "2015-02-12T16:59:00Z",
    "cwe_ids": [
        "CWE-79"
    ]
}

References

Affected packages

Maven / org.apache.activemq:activemq-client

Package

Name: org.apache.activemq:activemq-client; View open source insights on deps.dev
Purl: pkg:maven/org.apache.activemq/activemq-client

Affected ranges

Type: ECOSYSTEM
Events: Introduced

5.0.0

Fixed

5.10.1

Affected versions

5.*

5.8.0

5.9.0

5.9.1

5.10.0

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9cvr-8xq4-2m73/GHSA-9cvr-8xq4-2m73.json"