The vulnerability of the user interface for managing brokers of message queues like RabbitMQ and cloud-based message delivery platforms like Tanzu RabbitMQ, which allows for the execution of arbitrary JavaScript code.

The vulnerability of the user interface for managing RabbitMQ message brokers and Tanzu RabbitMQ, a cloud-based message delivery platform, is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to execute arbitrary...

PT-2025-12833

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.0.3 Tanzu RabbitMQ versions prior to 4.0.3 and 3.13.8 Description RabbitMQ is a messaging and streaming broker. A sophisticated attack could modify the virtual host name on disk, making it unrecoverable and leading...

CVE-2025-30219: Improper Neutralization of Input During Web Page Generation

RabbitMQ is a messaging and streaming broker. Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable with other on disk file modifications can lead to arbitrary JavaScript code execution in the browsers of...