[AMQ-5415] Apache Active MQ various admin web application vulns

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Incomplete
• Affects Version/s: 5.10.0
• Component/s: Web Console
• Assignee: Unassigned
• Reporter: Atholl Stewart
• Created: 28/Oct/14 15:37
• Updated: 04/Apr/16 19:33
• Resolved: 04/Apr/16 19:15

Description

The Apache MQ web administration interface is affected by a number of web application security issues, namely:

• stored XSS
• reflected XSS
• path traversal