In Apache ActiveMQ versions 5.0.0 to 5.15.5, a cross-site scripting vulnerability was discovered on the queue.jsp page of the web-based administration console. The root cause of this problem is the QueueFilter parameter’s incorrect data filtering.
Recommendation
Update Apache ActiveMQ to the latest version
Written by
Anandhu K A
Lead Engineer
Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 10 days