Title

Apache ActiveMQ HTML Injection Vulnerability (Cat I impact)

Discussion

The Apache Software Foundation has addressed a vulnerability in ActiveMQ. Apache ActiveMQ is an open source message broker written in Java together with a full Java Message Service (JMS) client. To exploit this vulnerability, an attacker would inject a malicious script code into an affected application. If successfully exploited, the attacker would execute arbitrary code in the context of the affected application.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-72801

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.