GHSA-9cvr-8xq4-2m73
Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ
At a glance
- Published
- Updated
- CVE
- CVE-2014-8110
Description
Multiple cross-site scripting (XSS) vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected packages
| Package | Versions |
|---|---|
| Maven · org.apache.activemq:activemq-client | introduced 5.0.0, fixed 5.10.1 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2014-8110 ADVISORY
- https://github.com/apache/activemq/commit/994d9b26 WEB
- https://github.com/apache/activemq/commit/f8b3de86d8154db5680433e46734b2bd9ced852b WEB
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100724 WEB
- https://github.com/apache/activemq PACKAGE
- https://issues.apache.org/jira/browse/AMQ-5033 WEB
- https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E WEB
- https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2@%3Ccommits.activemq.apache.org%3E WEB
- https://web.archive.org/web/20161110092459/http://secunia.com/advisories/62649 WEB
- https://web.archive.org/web/20200228044455/http://www.securityfocus.com/bid/72511 WEB
- http://activemq.apache.org/security-advisories.data/CVE-2014-8110-announcement.txt WEB
- http://seclists.org/oss-sec/2015/q1/427 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |