En bref
- CVE-2020-13932 est une vulnérabilité MOYENNE (CVSS 6.1) touchant org.apache.activemq:apache-artemis, artemis (apache).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 4.3%, plus élevée que 91.2% des vulnérabilités.
- Correctif : mettre à jour vers 2.14.0 ou plus récent.
Description
In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability. The XSS payload is being injected into the admin console's browser. The XSS payload is triggered in the diagram plugin; queue node and the info section.
NVD description
In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability. The XSS payload is being injected into the admin console's browser. The XSS payload is triggered in the diagram plugin; queue node and the info section.
Autres vulnérabilités de org.apache.activemq:apache-artemis
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free