Skip to content
OpenAdvisories
Low RHSA-2022:8867 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (rabbitmq-server) security update

Published Sep 16, 2024 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · OpenStack 16 openstack:16.1::el8 rabbitmq-server 0:3.7.23-9.el8ost

Vulnerabilities 1

  • Low 3.1
    CVE-2021-32718

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI

    RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper `<script>` tag sanitization, potentially …

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1977002
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8867.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-32718
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-32718
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-32718