Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache ActiveMQ 'createDestination.action'跨站请求伪造漏洞
Vulnerability Description
ActiveMQ是美国Apache软件基金会所研发的一套开源的消息中间件，它支持Java消息服务、集群、Spring Framework等。 Apache ActiveMQ的createDestination.action存在跨站请求伪造漏洞。远程攻击者可以劫持未明受害人的认证请求,通过队列操作中的JMSDestination参数创建队列。
CVSS Information
N/A
Vulnerability Type
N/A