CVE-2010-1244

Published: Apr 5, 2010Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue action.

Affected (23)

Products: Apache: Activemq

Apache

1 product

Activemq

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Apache Activemq	Up to 5.3.0
Apache Activemq	Version 1.1
Apache Activemq	Version 1.2
Apache Activemq	Version 1.3
Apache Activemq	Version 1.4
Apache Activemq	Version 1.5
Apache Activemq	Version 2.0
Apache Activemq	Version 2.1
Apache Activemq	Version 3.0
Apache Activemq	Version 3.1
Apache Activemq	Version 3.2.1
Apache Activemq	Version 3.2.2
Apache Activemq	Version 3.2
Apache Activemq	Version 4.0.1
Apache Activemq	Version 4.0.2
Apache Activemq	Version 4.0
Apache Activemq	Version 4.0 m4
Apache Activemq	Version 4.0 rc2
Apache Activemq	Version 4.1.0
Apache Activemq	Version 4.1.1
Apache Activemq	Version 5.0.0
Apache Activemq	Version 5.1.0
Apache Activemq	Version 5.2.0