CVE-2020-14319

MEDIUM

Red Hat AMQ Online < 1.5.2 and Enmasse < 0.32.2 - Cross-Site Request Forgery

Title source: llm
STIX 2.1

Description

It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery (CSRF) which is exploitable in cases where preflight checks are not instigated or bypassed. For example authorised users using an older browser with Adobe Flash are vulnerable when targeted by an attacker. This flaw affects all versions of AMQ-Online prior to 1.5.2 and Enmasse versions 0.31.0-rc1 up until but not including 0.32.2.

References (1)

Core 1
Core References
Issue Tracking, Vendor Advisory x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=1854373

Scores

CVSS v3 5.9
EPSS 0.0010
EPSS Percentile 27.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H

Details

CWE
CWE-352
Status published
Products (2)
redhat/amq_online < 1.5.2
redhat/enmasse < 0.32.2
Published Aug 03, 2020
Tracked Since Feb 18, 2026