Summary
It was discovered that RabbitMQ Server's management UI did not sanitize
certain input. An attacker could possibly use this issue to inject code
by performing a cross-site scripting (XSS) attack.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | rabbitmq-server | 3.8.3-0ubuntu0.3 |
| Ubuntu · 22.04 LTS 22.04:LTS | rabbitmq-server | 3.9.27-0ubuntu0.2 |
| Ubuntu · 24.04 LTS 24.04:LTS | rabbitmq-server | 3.12.1-1ubuntu1.2 |
Vulnerabilities 1
-
Medium 6.1
RabbitMQ has XSS Vulnerability in an Error Message in Management UI
RabbitMQ is a messaging and streaming broker. Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable (with other on disk file modifications) can lead to arbitrary JavaScript …
References
-
report
https://ubuntu.com/security/CVE-2025-30219