En resumen
- CVE-2020-13932 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a org.apache.activemq:apache-artemis, artemis (apache).
- Probabilidad de explotación en los próximos 30 días (EPSS): 4.3%, mayor que el 91.2% de las vulnerabilidades.
- Solución: actualizar a 2.14.0 o posterior.
Description
In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability. The XSS payload is being injected into the admin console's browser. The XSS payload is triggered in the diagram plugin; queue node and the info section.
NVD description
In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability. The XSS payload is being injected into the admin console's browser. The XSS payload is triggered in the diagram plugin; queue node and the info section.
Más vulnerabilidades de org.apache.activemq:apache-artemis
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free