https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:53:05 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-03490 bdu:2021-03490 https://cve.radiocsirt.org/vuln/bdu:2021-03490 https://cve.radiocsirt.org/vuln/bit-rabbitmq-2021-32719 <p><strong>Affected:</strong> Bitnami: rabbitmq</p> <p>RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was displayed in the RabbitMQ management UI via the `rabbitmq_federation_management` plugin, its consumer tag was rendered without proper &lt;script&gt; tag sanitization. This potentially allows for JavaScript code execution in the context of the page. The user must be signed in and have elevated permissions (manage federation upstreams and policies) for this to occur. The vulnerability is patched in RabbitMQ 3.8.18. As a workaround, disable the `rabbitmq_federation_management` plugin and use [CLI tools](https://www.rabbitmq.com/cli.html) instead.</p> <p><strong>Affected:</strong> Bitnami: rabbitmq</p> <p>RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was displayed in the RabbitMQ management UI via the `rabbitmq_federation_management` plugin, its consumer tag was rendered without proper &lt;script&gt; tag sanitization. This potentially allows for JavaScript code execution in the context of the page. The user must be signed in and have elevated permissions (manage federation upstreams and policies) for this to occur. The vulnerability is patched in RabbitMQ 3.8.18. As a workaround, disable the `rabbitmq_federation_management` plugin and use [CLI tools](https://www.rabbitmq.com/cli.html) instead.</p> https://cve.radiocsirt.org/vuln/bit-rabbitmq-2021-32719 https://cve.radiocsirt.org/vuln/cnvd-2021-49048 cnvd-2021-49048 https://cve.radiocsirt.org/vuln/cnvd-2021-49048 https://cve.radiocsirt.org/vuln/euvd-2026-28069 EUVD-2026-28069 https://cve.radiocsirt.org/vuln/euvd-2026-28069 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32719 <p>RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was displayed in the RabbitMQ management UI via the `rabbitmq_federation_management` plugin, its consumer tag was rendered without proper &lt;script&gt; tag sanitization. This potentially allows for JavaScript code execution in the context of the page. The user must be signed in and have elevated permissions (manage federation upstreams and policies) for this to occur. The vulnerability is patched in RabbitMQ 3.8.18. As a workaround, disable the `rabbitmq_federation_management` plugin and use [CLI tools](https://www.rabbitmq.com/cli.html) instead.</p> <p>RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was displayed in the RabbitMQ management UI via the `rabbitmq_federation_management` plugin, its consumer tag was rendered without proper &lt;script&gt; tag sanitization. This potentially allows for JavaScript code execution in the context of the page. The user must be signed in and have elevated permissions (manage federation upstreams and policies) for this to occur. The vulnerability is patched in RabbitMQ 3.8.18. As a workaround, disable the `rabbitmq_federation_management` plugin and use [CLI tools](https://www.rabbitmq.com/cli.html) instead.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-32719 https://cve.radiocsirt.org/vuln/gsd-2021-32719 gsd-2021-32719 https://cve.radiocsirt.org/vuln/gsd-2021-32719 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1334-1 <p>Security update for rabbitmq-server</p> <p>Security update for rabbitmq-server</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:1334-1 https://cve.radiocsirt.org/vuln/rhsa-2022:8851 <p>rabbitmq-server: improper neutralization of script-related HTML tags in a web page (basic XSS) in management UI rabbitmq-server: improper neutralization of script-related HTML tags in a web page (basic XSS) in federation management plugin</p> <p>rabbitmq-server: improper neutralization of script-related HTML tags in a web page (basic XSS) in management UI rabbitmq-server: improper neutralization of script-related HTML tags in a web page (basic XSS) in federation management plugin</p> https://cve.radiocsirt.org/vuln/rhsa-2022:8851 https://cve.radiocsirt.org/vuln/suse-fu-2024:2078-1 <p>Feature update for rabbitmq-server313, erlang26, elixir115</p> <p>Feature update for rabbitmq-server313, erlang26, elixir115</p> https://cve.radiocsirt.org/vuln/suse-fu-2024:2078-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32719 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: rabbitmq-server</p> <p>RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was displayed in the RabbitMQ management UI via the `rabbitmq_federation_management` plugin, its consumer tag was rendered without proper &lt;script&gt; tag sanitization. This potentially allows for JavaScript code execution in the context of the page. The user must be signed in and have elevated permissions (manage federation upstreams and policies) for this to occur. The vulnerability is patched in RabbitMQ 3.8.18. As a workaround, disable the `rabbitmq_federation_management` plugin and use [CLI tools](https://www.rabbitmq.com/cli.html) instead.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: rabbitmq-server</p> <p>RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was displayed in the RabbitMQ management UI via the `rabbitmq_federation_management` plugin, its consumer tag was rendered without proper &lt;script&gt; tag sanitization. This potentially allows for JavaScript code execution in the context of the page. The user must be signed in and have elevated permissions (manage federation upstreams and policies) for this to occur. The vulnerability is patched in RabbitMQ 3.8.18. As a workaround, disable the `rabbitmq_federation_management` plugin and use [CLI tools](https://www.rabbitmq.com/cli.html) instead.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32719 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2258 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in RabbitMQ ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in RabbitMQ ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2258