CVE-2013-1880

Description

Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet in the demo web application in Apache ActiveMQ before 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the refresh parameter to demo/portfolioPublish, a different vulnerability than CVE-2012-6092.

Risk Information

Base Score

9.8

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

1.367

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2013-1880 are fixed in Apache-activemq-core 5.9.0	Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 5.2	Windows
Multiple Vulnerabilities are affected in IBM Security Verify Directory Integrator 7.2.0	Windows
Vulnerabilities CVE-2013-1880 are fixed in Apache-activemq-core for Linux 5.9.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234