Description

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks.

Related CPE's

a

broadcom

rabbitmq_server

11

a

pivotal_software

rabbitmq

57

o

debian

debian_linux

9.0

Vulnerable

References

https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html

Third Party Advisory

https://pivotal.io/security/cve-2017-4965

MitigationVendor Advisory

https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html

Third Party Advisory

https://pivotal.io/security/cve-2017-4965

MitigationVendor Advisory

Weaknesses

[email protected]

Primary
CWE-79

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.1 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Deferred

Published

2017-06-13T04:29:00.520Z

8 years ago

Last modified

2025-04-19T23:37:25.860Z

11 months ago