Skip to content
OpenAdvisories
Low RHSA-2020:0553 1 CVE

Red Hat Security Advisory: rabbitmq-server security update

Published Sep 16, 2024 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · OpenStack 15 openstack:15::el8 rabbitmq-server 0:3.7.23-2.el8ost

Vulnerabilities 1

  • Low 3.1
    CVE-2019-11291

    RabbitMQ XSS attack via federation and shovel endpoints

    Pivotal RabbitMQ, 3.7 versions prior to v3.7.20 and 3.8 version prior to v3.8.1, and RabbitMQ for PCF, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain two endpoints, federation and shovel, which do not properly sanitize user input…

    Pivotal RabbitMQ RabbitMQ for Pivotal Platform rabbitmq-server Debian Hex

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1783327
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1786326
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0553.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-11291
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11291
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11291
  • article
    https://pivotal.io/security/cve-2019-11291