Skip to content
OpenAdvisories
Low WID-SEC-2022-2258 2 CVEs

RabbitMQ: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published Jun 28, 2021 · Updated Dec 9, 2024 · Revision 6 · de-DE

Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: Linux Product: Linux Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in RabbitMQ ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

RabbitMQ ist ein Open-Source Message Broker.

Vulnerabilities 2

  • Low 3.1
    CVE-2021-32718

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI

    RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper `<script>` tag sanitization, potentially …

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server Debian Ubuntu
  • Low 3.1
    CVE-2021-32719

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management plugin

    RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was displayed in the RabbitMQ management UI via the `rabbitmq_federation_management` plugin, its consumer tag was rendered without proper <script…

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server Debian Ubuntu Alpine

Revision history

  1. #6

    Neue Updates von Ubuntu aufgenommen

  2. #5

    Neue Updates von Red Hat aufgenommen

  3. #4

    Neue Updates von SUSE aufgenommen

  4. #3

    Neue Updates von SUSE aufgenommen

  5. #2

    Neue Updates von Arch Linux aufgenommen

  6. #1

    Initiale Fassung

References