https://bugzilla.redhat.com/show_bug.cgi?id=1858946
--- Doc Text *updated* by Eric Christensen <sparks(a)redhat.com> ---
A flaw was found in activemq. A specifically crafted MQTT packet which has an XSS payload
as client-id or topic name can exploit this vulnerability. The XSS payload is being
injected into the admin console's browser. The XSS payload is triggered in the diagram
plugin; queue node and the info section.
--
You are receiving this mail because:
You are on the CC list for the bug.