USN-7399-1: RabbitMQ Server vulnerability
It was discovered that RabbitMQ Server's management UI did not sanitize certain input. An attacker could possibly use this issue to inject code by performing a cross-site scripting (XSS) attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7399-1?
The severity of USN-7399-1 is considered moderate due to the potential for cross-site scripting (XSS) attacks.
How do I fix USN-7399-1?
To fix USN-7399-1, upgrade RabbitMQ Server to the recommended patched version according to your Ubuntu release.
What are the potential impacts of USN-7399-1?
The potential impacts of USN-7399-1 include the risk of attackers injecting malicious scripts through the management UI.
Which versions of RabbitMQ Server are affected by USN-7399-1?
RabbitMQ Server versions prior to 3.12.1-1ubuntu2.1 and earlier versions like 3.9.27-0ubuntu0.2 are affected by USN-7399-1.
Is RabbitMQ Server's management UI secure after the fix for USN-7399-1?
Yes, after applying the fix for USN-7399-1, the management UI of RabbitMQ Server is secured against the identified input sanitization issues.