Cross-Site Scripting Vulnerabilities in RabbitMQ Management Plugin
CVE-2015-0862

Currently unrated

Key Information:

Vendor: Pivotal Software
Status: RabbitMQ Management
Vendor: CVE Published:; 18 January 2015

🔔 Create Pivotal Software Vulnerability Alert

What is CVE-2015-0862?

The RabbitMQ management plugin prior to version 3.4.3 is susceptible to multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities permit remote authenticated users to inject arbitrary web scripts or HTML, impacting various components such as message details during unqueuing, policy names, network client details, user names, and cluster names. This could lead to unauthorized access and data manipulation risks within the RabbitMQ environment, particularly for remote authenticated administrators and users.

References

http://www.rabbitmq.com/news.html#2015-01-08T10:14:05+0100

x_refsource_CONFIRM

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 18, 2015
Vulnerability Reserved
Jan 7, 2015

CVE-2015-0862 Data

JSON