https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:09:59 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-05298 bdu:2021-05298 https://cve.radiocsirt.org/vuln/bdu:2021-05298 https://cve.radiocsirt.org/vuln/euvd-2026-169238 EUVD-2026-169238 https://cve.radiocsirt.org/vuln/euvd-2026-169238 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11281 <p>Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the virtual host limits page, and the federation management UI, which do not properly sanitize user input. A remote authenticated malicious user with administrative access could craft a cross site scripting attack that would gain access to virtual hosts and policy management information.</p> <p>Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the virtual host limits page, and the federation management UI, which do not properly sanitize user input. A remote authenticated malicious user with administrative access could craft a cross site scripting attack that would gain access to virtual hosts and policy management information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-11281 https://cve.radiocsirt.org/vuln/ghsa-8v5q-8hwh-h2x8 <p>Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the virtual host limits page, and the federation management UI, which do not properly sanitize user input. A remote authenticated malicious user with administrative access could craft a cross site scripting attack that would gain access to virtual hosts and policy management information.</p> <p>Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the virtual host limits page, and the federation management UI, which do not properly sanitize user input. A remote authenticated malicious user with administrative access could craft a cross site scripting attack that would gain access to virtual hosts and policy management information.</p> https://cve.radiocsirt.org/vuln/ghsa-8v5q-8hwh-h2x8 https://cve.radiocsirt.org/vuln/gsd-2019-11281 gsd-2019-11281 https://cve.radiocsirt.org/vuln/gsd-2019-11281 https://cve.radiocsirt.org/vuln/rhsa-2020:0078 <p>rabbitmq-server: improper sanitization of vhost limits and federation management UI pages rabbitmq-server: &#34;X-Reason&#34; HTTP Header can be leveraged to insert a malicious string leading to DoS</p> <p>rabbitmq-server: improper sanitization of vhost limits and federation management UI pages rabbitmq-server: &#34;X-Reason&#34; HTTP Header can be leveraged to insert a malicious string leading to DoS</p> https://cve.radiocsirt.org/vuln/rhsa-2020:0078 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11281 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: rabbitmq-server</p> <p>Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the virtual host limits page, and the federation management UI, which do not properly sanitize user input. A remote authenticated malicious user with administrative access could craft a cross site scripting attack that would gain access to virtual hosts and policy management information.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: rabbitmq-server</p> <p>Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the virtual host limits page, and the federation management UI, which do not properly sanitize user input. A remote authenticated malicious user with administrative access could craft a cross site scripting attack that would gain access to virtual hosts and policy management information.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11281