CVE-2010-1587

CVE-2010-1587 is a source code disclosure vulnerability affecting Apache ActiveMQ versions 5.x before 5.3.2 and 5.4.x before 5.4.0. Attackers can exploit a flaw in the Jetty ResourceHandler to read JSP source code from specific administrative pages by including "//" in the URI. This vulnerability has a CVSS score of 5.0, indicating a medium severity, and allows for information disclosure (C:P) without requiring authentication (Au:N) or complex attack conditions (AC:L). The EPSS score of 0.75383 suggests a higher-than-average likelihood of exploitation, further supported by its high FAUCET Risk Score of 99/100. While not on the KEV catalog, exploit modules are available in Metasploit and ExploitDB, confirming the existence of public exploit code. Despite the availability of exploits, there is no recorded community discussion or media coverage, which is typical for a large percentage of CVEs.