Apache ActiveMQ XSS

By
Anandhu K A
Published on
10 Jan 2022
Vulnerability

Description

In Apache ActiveMQ versions 5.0.0 to 5.15.5, a cross-site scripting vulnerability was discovered on the queue.jsp page of the web-based administration console. The root cause of this problem is the QueueFilter parameter’s incorrect data filtering.

Recommendation

  • Update Apache ActiveMQ to the latest version
Written by
Anandhu K A
Anandhu K A
Lead Engineer
Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 14 days