CVE-2017-4965

CWE-79 — Cross-site Scripting (XSS)9 documents7 sources
Severity
6.1MEDIUM
EPSS
0.7%
top 27.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Broadcom Rabbitmq ServerDebian Debian LinuxPivotal Software Rabbitmq
Timeline
PublishedJun 13
Latest updateMay 13

Description

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages4 packages

▶CVEListV5pivotal_rabbitmqPivotal RabbitMQ
▶NVDpivotal_software/rabbitmq57 versions+56
▶Debianrabbitmq-server< 3.6.10-1+3
▶NVDbroadcom/rabbitmq_server11 versions+10

Also affects: Debian Linux 9.0

🔴Vulnerability Details

3
GHSA
GHSA-734q-gfvq-r9w2: An issue was discovered in these Pivotal RabbitMQ versions: all 3↗2022-05-13
▶
CVEList
CVE-2017-4965: An issue was discovered in these Pivotal RabbitMQ versions: all 3↗2017-06-13
▶
OSV
CVE-2017-4965: An issue was discovered in these Pivotal RabbitMQ versions: all 3↗2017-06-13
▶

📋Vendor Advisories

2
Red Hat
rabbitmq: XSS vulnerability in management UI↗2017-03-29
▶
Debian
CVE-2017-4965: rabbitmq-server - An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, ...↗2017
▶

💬Community

3
Bugzilla
CVE-2017-4965 CVE-2017-4966 CVE-2017-4967 rabbitmq-server: various flaws [fedora-24]↗2017-05-05
▶
Bugzilla
CVE-2017-4965 CVE-2017-4966 CVE-2017-4967 rabbitmq-server: various flaws [epel-all]↗2017-05-05
▶
Bugzilla
CVE-2017-4965 rabbitmq: XSS vulnerability in management UI↗2017-05-05
▶
CVE-2017-4965 (MEDIUM CVSS 6.1) | An issue was discovered in these Pi | cvebase.io