Kurz gesagt
- CVE-2020-13932 ist eine Schwachstelle (MITTEL (CVSS 6.1)) in org.apache.activemq:apache-artemis, artemis (apache).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 4.3%, höher als bei 91.2% aller Schwachstellen.
- Abhilfe: auf 2.14.0 oder neuer aktualisieren.
Description
In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability. The XSS payload is being injected into the admin console's browser. The XSS payload is triggered in the diagram plugin; queue node and the info section.
NVD description
In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability. The XSS payload is being injected into the admin console's browser. The XSS payload is triggered in the diagram plugin; queue node and the info section.
Weitere Schwachstellen in org.apache.activemq:apache-artemis
Alle anzeigen →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free