CVE-2019-11291

🗓️ 22 Nov 2019 22:56:08Reported by pivotalType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 318 Views

Pivotal RabbitMQ and RabbitMQ for PCF versions prior to 3.7.20, 3.8.1, 1.16.7, and 1.17.4 allow XSS attack and administrative access

Reporter	Title	Published	Views	Family All 21
BDU FSTEC	The vulnerabilities of the federation components and the RabbitMQ messaging broker allow attackers to compromise data integrity.	21 Aug 202300:00	–	bdu_fstec
Circl	CVE-2019-11291	26 Feb 202415:11	–	circl
CNVD	Pivotal Software RabbitMQ Cross-Site Scripting Vulnerability	25 Nov 201900:00	–	cnvd
Cvelist	CVE-2019-11291 RabbitMQ XSS attack via federation and shovel endpoints	22 Nov 201922:56	–	cvelist
Debian CVE	CVE-2019-11291	22 Nov 201922:56	–	debiancve
EUVD	EUVD-2022-3419	3 Oct 202520:07	–	euvd
Github Security Blog	Cross-site Scripting in RabbitMQ	24 May 202217:01	–	github
NVD	CVE-2019-11291	22 Nov 201923:15	–	nvd
OSV	DEBIAN-CVE-2019-11291	22 Nov 201923:15	–	osv
OSV	GHSA-9PF7-F47Q-MWPQ Cross-site Scripting in RabbitMQ	24 May 202217:01	–	osv

NVD

Node

broadcom rabbitmq_serverRange3.7.0–3.7.20

broadcom rabbitmq_serverMatch3.8.0

vmware rabbitmqRange1.16.0–1.16.7pivotal_cloud_foundry

vmware rabbitmqRange1.17.0–1.17.4pivotal_cloud_foundry

Node

redhat openstackMatch15

[
  {
    "product": "RabbitMQ",
    "vendor": "Pivotal",
    "versions": [
      {
        "lessThan": "v3.8.1",
        "status": "affected",
        "version": "3.8",
        "versionType": "custom"
      },
      {
        "lessThan": "v3.7.20",
        "status": "affected",
        "version": "3.7",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "RabbitMQ for Pivotal Platform",
    "vendor": "Pivotal",
    "versions": [
      {
        "lessThan": "1.17.4",
        "status": "affected",
        "version": "1.17",
        "versionType": "custom"
      },
      {
        "lessThan": "1.16.7",
        "status": "affected",
        "version": "1.16",
        "versionType": "custom"
      }
    ]
  }
]