CVE-2019-11291lowCWE-79

CVE-2019-11291: low-severity vulnerability in Pivotal RabbitMQ

RabbitMQ XSS attack via federation and shovel endpoints

Published · Updated

Follow this CVE+ Monitor RabbitMQ+ Monitor RabbitMQ for Pivotal Platform

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.1epss 0.8%
Pivotal RabbitMQ, 3.7 versions prior to v3.7.20 and 3.8 version prior to v3.8.1, and RabbitMQ for PCF, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain two endpoints, federation and shovel, which do not properly sanitize user input. A remote authenticated malicious user with administrative access could craft a cross site scripting attack via the vhost or node name fields that could grant access to virtual hosts and policy management information.
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N
Affected products
Pivotal · RabbitMQPivotal · RabbitMQ for Pivotal Platform
Related CVEs — Pivotal RabbitMQ

In the same product, most dangerous first.

CVE-2019-11287MEDIUMRabbitMQ Web Management Plugin DoS via heap overflowEPSS 4.4%CVE-2019-11281LOWRabbitMQ XSS attackEPSS 1.2%