https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:05:14 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-04152 bdu:2025-04152 https://cve.radiocsirt.org/vuln/bdu:2025-04152 https://cve.radiocsirt.org/vuln/bit-rabbitmq-2021-32718 <p><strong>Affected:</strong> Bitnami: rabbitmq</p> <p>RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user&#39;s bane being rendered in a confirmation message without proper `&lt;script&gt;` tag sanitization, potentially allowing for JavaScript code execution in the context of the page. In order for this to occur, the user must be signed in and have elevated permissions (other user management). The vulnerability is patched in RabbitMQ 3.8.17. As a workaround, disable `rabbitmq_management` plugin and use CLI tools for management operations and Prometheus and Grafana for metrics and monitoring.</p> <p><strong>Affected:</strong> Bitnami: rabbitmq</p> <p>RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user&#39;s bane being rendered in a confirmation message without proper `&lt;script&gt;` tag sanitization, potentially allowing for JavaScript code execution in the context of the page. In order for this to occur, the user must be signed in and have elevated permissions (other user management). The vulnerability is patched in RabbitMQ 3.8.17. As a workaround, disable `rabbitmq_management` plugin and use CLI tools for management operations and Prometheus and Grafana for metrics and monitoring.</p> https://cve.radiocsirt.org/vuln/bit-rabbitmq-2021-32718 https://cve.radiocsirt.org/vuln/euvd-2026-28097 EUVD-2026-28097 https://cve.radiocsirt.org/vuln/euvd-2026-28097 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32718 <p>RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user&#39;s bane being rendered in a confirmation message without proper `&lt;script&gt;` tag sanitization, potentially allowing for JavaScript code execution in the context of the page. In order for this to occur, the user must be signed in and have elevated permissions (other user management). The vulnerability is patched in RabbitMQ 3.8.17. As a workaround, disable `rabbitmq_management` plugin and use CLI tools for management operations and Prometheus and Grafana for metrics and monitoring.</p> <p>RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user&#39;s bane being rendered in a confirmation message without proper `&lt;script&gt;` tag sanitization, potentially allowing for JavaScript code execution in the context of the page. In order for this to occur, the user must be signed in and have elevated permissions (other user management). The vulnerability is patched in RabbitMQ 3.8.17. As a workaround, disable `rabbitmq_management` plugin and use CLI tools for management operations and Prometheus and Grafana for metrics and monitoring.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-32718 https://cve.radiocsirt.org/vuln/gsd-2021-32718 gsd-2021-32718 https://cve.radiocsirt.org/vuln/gsd-2021-32718 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1334-1 <p>Security update for rabbitmq-server</p> <p>Security update for rabbitmq-server</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:1334-1 https://cve.radiocsirt.org/vuln/rhsa-2022:8851 <p>rabbitmq-server: improper neutralization of script-related HTML tags in a web page (basic XSS) in management UI rabbitmq-server: improper neutralization of script-related HTML tags in a web page (basic XSS) in federation management plugin</p> <p>rabbitmq-server: improper neutralization of script-related HTML tags in a web page (basic XSS) in management UI rabbitmq-server: improper neutralization of script-related HTML tags in a web page (basic XSS) in federation management plugin</p> https://cve.radiocsirt.org/vuln/rhsa-2022:8851 https://cve.radiocsirt.org/vuln/suse-fu-2024:2078-1 <p>Feature update for rabbitmq-server313, erlang26, elixir115</p> <p>Feature update for rabbitmq-server313, erlang26, elixir115</p> https://cve.radiocsirt.org/vuln/suse-fu-2024:2078-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32718 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: rabbitmq-server</p> <p>RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user&#39;s bane being rendered in a confirmation message without proper `&lt;script&gt;` tag sanitization, potentially allowing for JavaScript code execution in the context of the page. In order for this to occur, the user must be signed in and have elevated permissions (other user management). The vulnerability is patched in RabbitMQ 3.8.17. As a workaround, disable `rabbitmq_management` plugin and use CLI tools for management operations and Prometheus and Grafana for metrics and monitoring.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: rabbitmq-server</p> <p>RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user&#39;s bane being rendered in a confirmation message without proper `&lt;script&gt;` tag sanitization, potentially allowing for JavaScript code execution in the context of the page. In order for this to occur, the user must be signed in and have elevated permissions (other user management). The vulnerability is patched in RabbitMQ 3.8.17. As a workaround, disable `rabbitmq_management` plugin and use CLI tools for management operations and Prometheus and Grafana for metrics and monitoring.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32718 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2258 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in RabbitMQ ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in RabbitMQ ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2258