CVE-2010-0684

Apache ActiveMQ (the server) is affected by CVE-2010-0684 due to an input validation flaw in the createDestination.action handler. The JMSDestination parameter can be exploited to inject arbitrary script/HTML in the admin UI, leading to cross-site scripting. The issue requires an authenticated re...