Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
XML external entity (XXE) vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache ActiveMQ Apollo 安全漏洞
Vulnerability Description
Apache ActiveMQ是美国阿帕奇(Apache)软件基金会所研发的一套开源的消息中间件,它支持Java消息服务、集群、Spring Framework等。Apollo是新一代ActiveMQ消息系统。 Apache ActiveMQ Apollo中存在XML外部实体注入漏洞。远程攻击者可利用该漏洞在受影响应用程序上下文中执行未授权操作。
CVSS Information
N/A
Vulnerability Type
N/A