Lucene search
GoogleOSV:GHSA-33J4-8VCR-F79VHistoryMay 02, 2022 - 6:20 a.m.
Cross-site request forgery in Apache ActiveMQ
2022-05-0206:20:35
Google
osv.dev
8
Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue action.
References
activemq.apache.org/activemq-531-release.html
secunia.com/advisories/39223
exchange.xforce.ibmcloud.com/vulnerabilities/57398
github.com/apache/activemq
github.com/apache/activemq/commit/1f464b9412e1b1c08d40c8ffac40edd52731da48
github.com/apache/activemq/commit/f3d4034e2a7cee7b1f88c7e6b0d1d69458e1bcf0
issues.apache.org/activemq/browse/AMQ-2613
issues.apache.org/activemq/browse/AMQ-2625
nvd.nist.gov/vuln/detail/CVE-2010-1244
Related
cve
cve
CVE-2010-1244
2010-04-05 16:30:00
github
github
Cross-site request forgery in Apache ActiveMQ
2022-05-02 06:20:35
nvd
nvd
CVE-2010-1244
2010-04-05 16:30:00
prion
prion
Cross site request forgery (csrf)
2010-04-05 16:30:00
cvelist
cvelist
CVE-2010-1244
2010-04-05 16:00:00
openvas
openvas
Apache ActiveMQ Persistent Cross-Site Scripting Vulnerability
2010-04-16 00:00:00
