Описание
RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbitmq_federation_management plugin renders the consumer_tag field on the Federation Status page without HTML escaping, allowing a user who can configure a federation upstream or policy to execute JavaScript in the browser of a user viewing that page. This issue is fixed in versions 3.13.14, 4.0.19, 4.1.10, and 4.2.5.
A flaw was found in the RabbitMQ rabbitmq_federation_management plugin. This cross-site scripting (XSS) vulnerability occurs because the consumer_tag field on the Federation Status page does not properly escape HTML. A user with permissions to configure a federation upstream or policy can exploit this by injecting malicious JavaScript. When another user views the Federation Status page, the injected script executes in their browser, potentially leading to information disclosure or unauthorized actions.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenStack Platform 16.2 | rabbitmq-server | Not affected | ||
| Red Hat OpenStack Platform 17.1 | rabbitmq-server | Not affected | ||
| Red Hat OpenStack Platform 18.0 | rabbitmq-server | Not affected | ||
| Red Hat Hardened Images | rabbitmq-server4-3-main-4.3.2-1.hum1 | Fixed | RHSA-2026:35939 | 06.07.2026 |
| Red Hat Hardened Images | rabbitmq-server4-2-main-4.2.8-1.hum1 | Fixed | RHSA-2026:35940 | 06.07.2026 |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
EPSS
5.2 Medium
CVSS3
Связанные уязвимости
RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbitmq_federation_management plugin renders the consumer_tag field on the Federation Status page without HTML escaping, allowing a user who can configure a federation upstream or policy to execute JavaScript in the browser of a user viewing that page. This issue is fixed in versions 3.13.14, 4.0.19, 4.1.10, and 4.2.5.
RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbitmq_federation_management plugin renders the consumer_tag field on the Federation Status page without HTML escaping, allowing a user who can configure a federation upstream or policy to execute JavaScript in the browser of a user viewing that page. This issue is fixed in versions 3.13.14, 4.0.19, 4.1.10, and 4.2.5.
RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering
RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19 ...
Stored XSS in RabbitMQ federation management plugin via unsanitized consumer_tag rendering
EPSS
5.2 Medium
CVSS3