Skip to content
OpenAdvisories

Package · Maven

org.apache.activemq:activemq-web-console

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2010-1587 Public exploit EPSS 78%

    Apache ActiveMQ Sensitive Information Disclosure via the Jetty ResourceHandler

    The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // (slash slash) initial substring in a URI for (1) admin/index.jsp, (2) admin/queues.jsp, or (3) admin/topics.jsp.

    org.apache.activemq:activemq-web-console Maven