Skip to content
OpenAdvisories

Package · Alpine

rabbitmq-server

4 known vulnerabilities.

3 results · Feed

  • Low 3.1

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management plugin

    RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was displayed in the RabbitMQ management UI via the `rabbitmq_federation_management` plugin, its consumer tag was rendered without proper <script…

  • Medium 6.1
    CVE-2019-11358 Public exploit EPSS 87%

    XSS in jQuery as used in Drupal, Backdrop CMS, and other products

    jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Obj…

  • Medium 6.1
    CVE-2015-9251 Public exploit EPSS 30%

    Cross-Site Scripting (XSS) in jquery

    jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.