Astra Linux – Vulnerability in rabbitmq-server

RabbitMQ is a multi-protocol messaging broker. In rabbitMQ-server prior to version 3.8.17, adding a new user through the management UI could result in the user’s banner being displayed in a confirmation message without proper tag sanitization. This could potentially allow for JavaScript code to...

CVE-2024-45337 vulnerabilities

Vulnerabilities for packages: external-secrets-fips, authservice-fips, terraform, chartmuseum-fips, prometheus-operator, azcopy, node-feature-discovery, age, restic, crossplane-provider-aws-iam, grpc-health-probe-fips, nats-server, grafana-agent-operator, kubernetes-dns-node-cache-fips,...

rabbitmq-server: improper neutralization of script-related HTML tags in a web page (basic XSS) in management UI

RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper tag sanitization, potentially allowing for JavaScript code execution in the...