Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache ActiveMQ 安全特征问题漏洞
Vulnerability Description
Apache ActiveMQ是美国阿帕奇（Apache）软件基金会的一套开源的消息中间件，它支持Java消息服务、集群、Spring Framework等。 Apache ActiveMQ 5.13.2之前5.x版本的Web-based管理控制台中存在安全漏洞，该漏洞源于程序没有发送X-Frame-Options HTTP头。远程攻击者可借助包含FRAME或IFRAME元素的Web页面利用该漏洞实施点击劫持攻击。
CVSS Information
N/A
Vulnerability Type
N/A