Threats tagged 'ghsa-j548-68g5-9j7x'

Apache ActiveMQ and its Web Console contain a cross-site scripting (XSS) vulnerability in the browse page of the web console. This flaw allows an authenticated message producer to craft a JMS message ID containing malicious HTML or JavaScript. When an administrator views the queue in the Web Console, the malicious script executes in their browser. Versions before 5.19.8 and from 6.0.0 before 6.2.7 are affected. Upgrading to versions 5.19.8 or 6.2.7 resolves the issue.