[AMQ-4397] XSS vulnerability in scheduled.jsp

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.8.0
• Fix Version/s: 5.9.0
• Assignee: Dejan Bosanac
• Reporter: Dejan Bosanac
• Created: 21/Mar/13 10:14
• Updated: 23/Apr/13 08:17
• Resolved: 21/Mar/13 12:36

Description

If string like * * * * *<script>alert(1)</script> is entered into cron of a message, JS code will be executed on the scheduled.jsp page.