Lucene search
HistoryApr 05, 2010 - 4:30 p.m.
CVE-2010-1244
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
46.1%
Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue action.
Affected configurations
Node
apacheactivemqRange≤5.3.0
ORapacheactivemqMatch1.1
ORapacheactivemqMatch1.2
ORapacheactivemqMatch1.3
ORapacheactivemqMatch1.4
ORapacheactivemqMatch1.5
ORapacheactivemqMatch2.0
ORapacheactivemqMatch2.1
ORapacheactivemqMatch3.0
ORapacheactivemqMatch3.1
ORapacheactivemqMatch3.2
ORapacheactivemqMatch3.2.1
ORapacheactivemqMatch3.2.2
ORapacheactivemqMatch4.0
ORapacheactivemqMatch4.0m4
ORapacheactivemqMatch4.0rc2
ORapacheactivemqMatch4.0.1
ORapacheactivemqMatch4.0.2
ORapacheactivemqMatch4.1.0
ORapacheactivemqMatch4.1.1
ORapacheactivemqMatch5.0.0
ORapacheactivemqMatch5.1.0
ORapacheactivemqMatch5.2.0
Related
cve
cve
CVE-2010-1244
2010-04-05 16:30:00
github
github
Cross-site request forgery in Apache ActiveMQ
2022-05-02 06:20:35
prion
prion
Cross site request forgery (csrf)
2010-04-05 16:30:00
cvelist
cvelist
CVE-2010-1244
2010-04-05 16:00:00
osv
osv
Cross-site request forgery in Apache ActiveMQ
2022-05-02 06:20:35
openvas
openvas
Apache ActiveMQ Persistent Cross-Site Scripting Vulnerability
2010-04-16 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
46.1%
Related for NVD:CVE-2010-1244