Description

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks.

Related CPE's

a

pivotal_software

rabbitmq

57

a

vmware

rabbitmq

11

o

debian

debian_linux

9.0

Vulnerable

References

https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html

Third Party Advisory

https://pivotal.io/security/cve-2017-4965

MitigationVendor Advisory

Weaknesses

[email protected]

Primary
CWE-79

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.1 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2017-06-13T06:29:00.520

8 years ago

Last modified

2022-05-15T14:14:05.753

3 years ago