Description (CNA)
An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Pivotal RabbitMQ | affected Pivotal RabbitMQ |
CWE
No CWE identifiers supplied.
References
- https://pivotal.io/security/cve-2017-4965
- https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html
ADP enrichment
No English description supplied.