CVE-2013-1879

Apache ActiveMQ < 5.8.0 - Cross-Site Scripting via Scheduled Message Cron Parameter

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a message."

References (5)

Core 5
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1029.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/54073
Vendor Advisory x_refsource_confirm
https://issues.apache.org/jira/browse/AMQ-4397
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/61142
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/85586

Scores

EPSS 0.0637
EPSS Percentile 92.9%

Details

CWE
CWE-79
Status published
Products (15)
apache/activemq 5.0.0
apache/activemq 5.1.0
apache/activemq 5.2.0
apache/activemq 5.3.0
apache/activemq 5.3.1
apache/activemq 5.3.2
apache/activemq 5.4.0
apache/activemq 5.4.1
apache/activemq 5.4.2
apache/activemq 5.5.0
... and 5 more
Published Jul 20, 2013
Tracked Since Feb 18, 2026