QwikSec

Security Database

CVE

CWE

Training

CVE-2017-4967

Published: Jun 13, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks.

Vendor	Product	Versions
n/a	Pivotal RabbitMQ	affected `Pivotal RabbitMQ`

References

https://pivotal.io/security/cve-2017-4965

x_refsource_CONFIRM

[debian-lts-announce] 20210719 [SECURITY] [DLA 2710-1] rabbitmq-server security update

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.