CVE-2010-1244: Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1...

Security readout for executives and security teams

CVE-2010-1244 is a CSRF flaw in Apache ActiveMQ before 5.3.1. A malicious site could cause an authenticated ActiveMQ web console user’s browser to create a queue without their intent. Business urgency depends on whether old ActiveMQ web consoles are reachable and used by administrators. Exposure is most likely in legacy Apache ActiveMQ deployments before 5.3.1 with the web console enabled and reachable. Internet-facing consoles, shared admin workstations, or weak browsing separation raise practical risk. The bundle does not support expanding affected scope beyond ActiveMQ. Treat this as a legacy exposure cleanup item with moderate urgency. Prioritize any internet-accessible or administrator-facing ActiveMQ consoles running before 5.3.1. Lack of active exploitation evidence lowers emergency pressure, but obsolete middleware management surfaces should not remain exposed. Mitigation focus: Upgrade Apache ActiveMQ to 5.3.1 or later where feasible.; Restrict ActiveMQ web console access to trusted admin networks.; Require administrators to avoid browsing untrusted sites while authenticated..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.