Lucene search

K
osvGoogleOSV:GHSA-W525-W93J-RXGM
HistoryMay 14, 2022 - 1:14 a.m.

Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

2022-05-1401:14:51
Google
osv.dev
11
apache activemq
web page generation
input neutralization
clickjacking
http header

EPSS

0.002

Percentile

64.5%

The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.