Cross-site Scripting (XSS)

activemq-http is vulnerable to cross-site scripting XSS. The vulnerability exists as the value of clientID was not sanitized in createTransportChannel and stopped of HttpTunnelServlet.java...