Red Hat Security Advisory

RHSA-2020:0553

rabbitmq-server security update

Released 2020-02-19 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 15.0 rabbitmq-server-3.7.23-2.el8ost

Fixes 1 record

TI-2019-08448 CVE-2019-11291 · GHSA-9pf7-f47q-mwpq

RabbitMQ XSS attack via federation and shovel endpoints

LOW 23

Pivotal RabbitMQ, 3.7 versions prior to v3.7.20 and 3.8 version prior to v3.8.1, and RabbitMQ for PCF, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain two endpoints, federation and shovel, wh…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00796 Published 2019-11-22 Partial fix · v3.8.1, v3.7.20 +4 CWE-79