CVE-2010-1587

The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // (slash slash) initial substring in a URI for (1) admin/index.jsp, (2) admin/queues.jsp, or (3) admin/topics.jsp.

• CWE-20

• http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0278.html
• http://secunia.com/advisories/39567Vendor Advisory
• http://www.osvdb.org/64020Exploit
• http://www.securityfocus.com/archive/1/510896/100/0/threaded
• http://www.securityfocus.com/bid/39636
• http://www.vupen.com/english/advisories/2010/0979Vendor Advisory
• https://issues.apache.org/activemq/browse/AMQ-2700Patch
• http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0278.html
• http://secunia.com/advisories/39567Vendor Advisory
• http://www.osvdb.org/64020Exploit
• http://www.securityfocus.com/archive/1/510896/100/0/threaded
• http://www.securityfocus.com/bid/39636
• http://www.vupen.com/english/advisories/2010/0979Vendor Advisory
• https://issues.apache.org/activemq/browse/AMQ-2700Patch

Published

Apr 28, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1580Unspecified vulnerability in the SunRPC inspection feature o…
• CVE-2010-1581Unspecified vulnerability in the Transport Layer Security (T…
• CVE-2010-1583SQL injection vulnerability in the loadByKey function in the…
• CVE-2010-1584Cross-site scripting (XSS) vulnerability in the Context modu…
• CVE-2010-1585The nsIScriptableUnescapeHTML.parseFragment method in the Pa…
• CVE-2010-1586Open redirect vulnerability in red2301.html in HP System Man…
• CVE-2010-1588SQL injection vulnerability in the Getwebsess function in sh…
• CVE-2010-1589Directory traversal vulnerability in shopsessionsubs.asp in …
• CVE-2010-1590Cross-site scripting (XSS) vulnerability in shopsessionsubs.…
• CVE-2010-1591Beijing Rising International Rising Antivirus 2008 through 2…
• CVE-2010-1592sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver…
• CVE-2010-1593Multiple cross-site scripting (XSS) vulnerabilities in Silve…