CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-32719

RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was displayed in the RabbitMQ management UI via the `rabbitmq_federation_management` plugin, its consumer tag was rendered without proper <script> tag sanitization. This potentially allows for JavaScript code execution in the context of the page. The user must be signed in and have elevated permissions (manage federation upstreams and policies) for this to occur. The vulnerability is patched in RabbitMQ 3.8.18. As a workaround, disable the `rabbitmq_federation_management` plugin and use [CLI tools](https://www.rabbitmq.com/cli.html) instead.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 24.1%

CVSS Severity

CVSS v3 Score 3.1

CVSS v2 Score 3.5

References

Products affected by CVE-2021-32719

Vmware » Rabbitmq » Version: 1.0.0

cpe:2.3:a:vmware:rabbitmq:1.0.0
Vmware » Rabbitmq » Version: 1.1.0

cpe:2.3:a:vmware:rabbitmq:1.1.0
Vmware » Rabbitmq » Version: 1.1.1

cpe:2.3:a:vmware:rabbitmq:1.1.1
Vmware » Rabbitmq » Version: 1.2.0

cpe:2.3:a:vmware:rabbitmq:1.2.0
Vmware » Rabbitmq » Version: 1.3.0

cpe:2.3:a:vmware:rabbitmq:1.3.0
Vmware » Rabbitmq » Version: 1.4.0

cpe:2.3:a:vmware:rabbitmq:1.4.0
Vmware » Rabbitmq » Version: 1.5.0

cpe:2.3:a:vmware:rabbitmq:1.5.0
Vmware » Rabbitmq » Version: 1.5.1

cpe:2.3:a:vmware:rabbitmq:1.5.1
Vmware » Rabbitmq » Version: 1.5.2

cpe:2.3:a:vmware:rabbitmq:1.5.2
Vmware » Rabbitmq » Version: 1.5.3

cpe:2.3:a:vmware:rabbitmq:1.5.3
Vmware » Rabbitmq » Version: 1.5.4

cpe:2.3:a:vmware:rabbitmq:1.5.4
Vmware » Rabbitmq » Version: 1.5.5

cpe:2.3:a:vmware:rabbitmq:1.5.5
Vmware » Rabbitmq » Version: 1.6.0

cpe:2.3:a:vmware:rabbitmq:1.6.0
Vmware » Rabbitmq » Version: 1.7.0

cpe:2.3:a:vmware:rabbitmq:1.7.0
Vmware » Rabbitmq » Version: 1.7.1

cpe:2.3:a:vmware:rabbitmq:1.7.1
Vmware » Rabbitmq » Version: 1.7.2

cpe:2.3:a:vmware:rabbitmq:1.7.2
Vmware » Rabbitmq » Version: 1.8.0

cpe:2.3:a:vmware:rabbitmq:1.8.0
Vmware » Rabbitmq » Version: 1.8.1

cpe:2.3:a:vmware:rabbitmq:1.8.1
Vmware » Rabbitmq » Version: 2.0.0

cpe:2.3:a:vmware:rabbitmq:2.0.0
Vmware » Rabbitmq » Version: 2.1.0

cpe:2.3:a:vmware:rabbitmq:2.1.0
Vmware » Rabbitmq » Version: 2.1.1

cpe:2.3:a:vmware:rabbitmq:2.1.1
Vmware » Rabbitmq » Version: 2.2.0

cpe:2.3:a:vmware:rabbitmq:2.2.0
Vmware » Rabbitmq » Version: 2.3.0

cpe:2.3:a:vmware:rabbitmq:2.3.0
Vmware » Rabbitmq » Version: 2.3.1

cpe:2.3:a:vmware:rabbitmq:2.3.1
Vmware » Rabbitmq » Version: 2.4.0

cpe:2.3:a:vmware:rabbitmq:2.4.0
Vmware » Rabbitmq » Version: 2.4.1

cpe:2.3:a:vmware:rabbitmq:2.4.1
Vmware » Rabbitmq » Version: 2.5.0

cpe:2.3:a:vmware:rabbitmq:2.5.0
Vmware » Rabbitmq » Version: 2.5.1

cpe:2.3:a:vmware:rabbitmq:2.5.1
Vmware » Rabbitmq » Version: 2.6.0

cpe:2.3:a:vmware:rabbitmq:2.6.0
Vmware » Rabbitmq » Version: 2.6.1

cpe:2.3:a:vmware:rabbitmq:2.6.1
Vmware » Rabbitmq » Version: 2.7.0

cpe:2.3:a:vmware:rabbitmq:2.7.0
Vmware » Rabbitmq » Version: 2.7.1

cpe:2.3:a:vmware:rabbitmq:2.7.1
Vmware » Rabbitmq » Version: 2.8.0

cpe:2.3:a:vmware:rabbitmq:2.8.0
Vmware » Rabbitmq » Version: 2.8.1

cpe:2.3:a:vmware:rabbitmq:2.8.1
Vmware » Rabbitmq » Version: 2.8.2

cpe:2.3:a:vmware:rabbitmq:2.8.2
Vmware » Rabbitmq » Version: 2.8.3

cpe:2.3:a:vmware:rabbitmq:2.8.3
Vmware » Rabbitmq » Version: 2.8.4

cpe:2.3:a:vmware:rabbitmq:2.8.4
Vmware » Rabbitmq » Version: 2.8.5

cpe:2.3:a:vmware:rabbitmq:2.8.5
Vmware » Rabbitmq » Version: 2.8.6

cpe:2.3:a:vmware:rabbitmq:2.8.6
Vmware » Rabbitmq » Version: 2.8.7

cpe:2.3:a:vmware:rabbitmq:2.8.7
Vmware » Rabbitmq » Version: 3.0.0

cpe:2.3:a:vmware:rabbitmq:3.0.0
Vmware » Rabbitmq » Version: 3.0.1

cpe:2.3:a:vmware:rabbitmq:3.0.1
Vmware » Rabbitmq » Version: 3.0.2

cpe:2.3:a:vmware:rabbitmq:3.0.2
Vmware » Rabbitmq » Version: 3.0.3

cpe:2.3:a:vmware:rabbitmq:3.0.3
Vmware » Rabbitmq » Version: 3.0.4

cpe:2.3:a:vmware:rabbitmq:3.0.4
Vmware » Rabbitmq » Version: 3.1.0

cpe:2.3:a:vmware:rabbitmq:3.1.0
Vmware » Rabbitmq » Version: 3.1.1

cpe:2.3:a:vmware:rabbitmq:3.1.1
Vmware » Rabbitmq » Version: 3.1.2

cpe:2.3:a:vmware:rabbitmq:3.1.2
Vmware » Rabbitmq » Version: 3.1.3

cpe:2.3:a:vmware:rabbitmq:3.1.3
Vmware » Rabbitmq » Version: 3.1.4

cpe:2.3:a:vmware:rabbitmq:3.1.4
Vmware » Rabbitmq » Version: 3.1.5

cpe:2.3:a:vmware:rabbitmq:3.1.5
Vmware » Rabbitmq » Version: 3.2.0

cpe:2.3:a:vmware:rabbitmq:3.2.0
Vmware » Rabbitmq » Version: 3.2.1

cpe:2.3:a:vmware:rabbitmq:3.2.1
Vmware » Rabbitmq » Version: 3.2.2

cpe:2.3:a:vmware:rabbitmq:3.2.2
Vmware » Rabbitmq » Version: 3.2.3

cpe:2.3:a:vmware:rabbitmq:3.2.3
Vmware » Rabbitmq » Version: 3.2.4

cpe:2.3:a:vmware:rabbitmq:3.2.4
Vmware » Rabbitmq » Version: 3.3.0

cpe:2.3:a:vmware:rabbitmq:3.3.0
Vmware » Rabbitmq » Version: 3.3.1

cpe:2.3:a:vmware:rabbitmq:3.3.1
Vmware » Rabbitmq » Version: 3.3.2

cpe:2.3:a:vmware:rabbitmq:3.3.2
Vmware » Rabbitmq » Version: 3.3.3

cpe:2.3:a:vmware:rabbitmq:3.3.3
Vmware » Rabbitmq » Version: 3.3.4

cpe:2.3:a:vmware:rabbitmq:3.3.4
Vmware » Rabbitmq » Version: 3.3.5

cpe:2.3:a:vmware:rabbitmq:3.3.5
Vmware » Rabbitmq » Version: 3.4.0

cpe:2.3:a:vmware:rabbitmq:3.4.0
Vmware » Rabbitmq » Version: 3.4.1

cpe:2.3:a:vmware:rabbitmq:3.4.1
Vmware » Rabbitmq » Version: 3.4.2

cpe:2.3:a:vmware:rabbitmq:3.4.2
Vmware » Rabbitmq » Version: 3.4.3

cpe:2.3:a:vmware:rabbitmq:3.4.3
Vmware » Rabbitmq » Version: 3.4.4

cpe:2.3:a:vmware:rabbitmq:3.4.4
Vmware » Rabbitmq » Version: 3.5.0

cpe:2.3:a:vmware:rabbitmq:3.5.0
Vmware » Rabbitmq » Version: 3.5.1

cpe:2.3:a:vmware:rabbitmq:3.5.1
Vmware » Rabbitmq » Version: 3.5.2

cpe:2.3:a:vmware:rabbitmq:3.5.2
Vmware » Rabbitmq » Version: 3.5.3

cpe:2.3:a:vmware:rabbitmq:3.5.3
Vmware » Rabbitmq » Version: 3.5.4

cpe:2.3:a:vmware:rabbitmq:3.5.4
Vmware » Rabbitmq » Version: 3.5.5

cpe:2.3:a:vmware:rabbitmq:3.5.5
Vmware » Rabbitmq » Version: 3.5.6

cpe:2.3:a:vmware:rabbitmq:3.5.6
Vmware » Rabbitmq » Version: 3.5.7

cpe:2.3:a:vmware:rabbitmq:3.5.7
Vmware » Rabbitmq » Version: 3.5.8

cpe:2.3:a:vmware:rabbitmq:3.5.8
Vmware » Rabbitmq » Version: 3.6.0

cpe:2.3:a:vmware:rabbitmq:3.6.0
Vmware » Rabbitmq » Version: 3.6.1

cpe:2.3:a:vmware:rabbitmq:3.6.1
Vmware » Rabbitmq » Version: 3.6.10

cpe:2.3:a:vmware:rabbitmq:3.6.10
Vmware » Rabbitmq » Version: 3.6.11

cpe:2.3:a:vmware:rabbitmq:3.6.11
Vmware » Rabbitmq » Version: 3.6.12

cpe:2.3:a:vmware:rabbitmq:3.6.12
Vmware » Rabbitmq » Version: 3.6.13

cpe:2.3:a:vmware:rabbitmq:3.6.13
Vmware » Rabbitmq » Version: 3.6.14

cpe:2.3:a:vmware:rabbitmq:3.6.14
Vmware » Rabbitmq » Version: 3.6.15

cpe:2.3:a:vmware:rabbitmq:3.6.15
Vmware » Rabbitmq » Version: 3.6.16

cpe:2.3:a:vmware:rabbitmq:3.6.16
Vmware » Rabbitmq » Version: 3.6.2

cpe:2.3:a:vmware:rabbitmq:3.6.2
Vmware » Rabbitmq » Version: 3.6.3

cpe:2.3:a:vmware:rabbitmq:3.6.3
Vmware » Rabbitmq » Version: 3.6.4

cpe:2.3:a:vmware:rabbitmq:3.6.4
Vmware » Rabbitmq » Version: 3.6.5

cpe:2.3:a:vmware:rabbitmq:3.6.5
Vmware » Rabbitmq » Version: 3.6.6

cpe:2.3:a:vmware:rabbitmq:3.6.6
Vmware » Rabbitmq » Version: 3.6.7

cpe:2.3:a:vmware:rabbitmq:3.6.7
Vmware » Rabbitmq » Version: 3.6.8

cpe:2.3:a:vmware:rabbitmq:3.6.8
Vmware » Rabbitmq » Version: 3.6.9

cpe:2.3:a:vmware:rabbitmq:3.6.9
Vmware » Rabbitmq » Version: 3.7.0

cpe:2.3:a:vmware:rabbitmq:3.7.0
Vmware » Rabbitmq » Version: 3.7.1

cpe:2.3:a:vmware:rabbitmq:3.7.1
Vmware » Rabbitmq » Version: 3.7.10

cpe:2.3:a:vmware:rabbitmq:3.7.10
Vmware » Rabbitmq » Version: 3.7.11

cpe:2.3:a:vmware:rabbitmq:3.7.11
Vmware » Rabbitmq » Version: 3.7.12

cpe:2.3:a:vmware:rabbitmq:3.7.12
Vmware » Rabbitmq » Version: 3.7.13

cpe:2.3:a:vmware:rabbitmq:3.7.13
Vmware » Rabbitmq » Version: 3.7.14

cpe:2.3:a:vmware:rabbitmq:3.7.14
Vmware » Rabbitmq » Version: 3.7.15

cpe:2.3:a:vmware:rabbitmq:3.7.15
Vmware » Rabbitmq » Version: 3.7.16

cpe:2.3:a:vmware:rabbitmq:3.7.16
Vmware » Rabbitmq » Version: 3.7.17

cpe:2.3:a:vmware:rabbitmq:3.7.17
Vmware » Rabbitmq » Version: 3.7.18

cpe:2.3:a:vmware:rabbitmq:3.7.18
Vmware » Rabbitmq » Version: 3.7.19

cpe:2.3:a:vmware:rabbitmq:3.7.19
Vmware » Rabbitmq » Version: 3.7.2

cpe:2.3:a:vmware:rabbitmq:3.7.2
Vmware » Rabbitmq » Version: 3.7.20

cpe:2.3:a:vmware:rabbitmq:3.7.20
Vmware » Rabbitmq » Version: 3.7.21

cpe:2.3:a:vmware:rabbitmq:3.7.21
Vmware » Rabbitmq » Version: 3.7.22

cpe:2.3:a:vmware:rabbitmq:3.7.22
Vmware » Rabbitmq » Version: 3.7.23

cpe:2.3:a:vmware:rabbitmq:3.7.23
Vmware » Rabbitmq » Version: 3.7.24

cpe:2.3:a:vmware:rabbitmq:3.7.24
Vmware » Rabbitmq » Version: 3.7.25

cpe:2.3:a:vmware:rabbitmq:3.7.25
Vmware » Rabbitmq » Version: 3.7.26

cpe:2.3:a:vmware:rabbitmq:3.7.26
Vmware » Rabbitmq » Version: 3.7.27

cpe:2.3:a:vmware:rabbitmq:3.7.27
Vmware » Rabbitmq » Version: 3.7.28

cpe:2.3:a:vmware:rabbitmq:3.7.28
Vmware » Rabbitmq » Version: 3.7.3

cpe:2.3:a:vmware:rabbitmq:3.7.3
Vmware » Rabbitmq » Version: 3.7.4

cpe:2.3:a:vmware:rabbitmq:3.7.4
Vmware » Rabbitmq » Version: 3.7.5

cpe:2.3:a:vmware:rabbitmq:3.7.5
Vmware » Rabbitmq » Version: 3.7.6

cpe:2.3:a:vmware:rabbitmq:3.7.6
Vmware » Rabbitmq » Version: 3.7.7

cpe:2.3:a:vmware:rabbitmq:3.7.7
Vmware » Rabbitmq » Version: 3.7.8

cpe:2.3:a:vmware:rabbitmq:3.7.8
Vmware » Rabbitmq » Version: 3.7.9

cpe:2.3:a:vmware:rabbitmq:3.7.9
Vmware » Rabbitmq » Version: 3.8.0

cpe:2.3:a:vmware:rabbitmq:3.8.0
Vmware » Rabbitmq » Version: 3.8.1

cpe:2.3:a:vmware:rabbitmq:3.8.1
Vmware » Rabbitmq » Version: 3.8.10

cpe:2.3:a:vmware:rabbitmq:3.8.10
Vmware » Rabbitmq » Version: 3.8.11

cpe:2.3:a:vmware:rabbitmq:3.8.11
Vmware » Rabbitmq » Version: 3.8.12

cpe:2.3:a:vmware:rabbitmq:3.8.12
Vmware » Rabbitmq » Version: 3.8.13

cpe:2.3:a:vmware:rabbitmq:3.8.13
Vmware » Rabbitmq » Version: 3.8.14

cpe:2.3:a:vmware:rabbitmq:3.8.14
Vmware » Rabbitmq » Version: 3.8.15

cpe:2.3:a:vmware:rabbitmq:3.8.15
Vmware » Rabbitmq » Version: 3.8.16

cpe:2.3:a:vmware:rabbitmq:3.8.16
Vmware » Rabbitmq » Version: 3.8.17

cpe:2.3:a:vmware:rabbitmq:3.8.17
Vmware » Rabbitmq » Version: 3.8.2

cpe:2.3:a:vmware:rabbitmq:3.8.2
Vmware » Rabbitmq » Version: 3.8.3

cpe:2.3:a:vmware:rabbitmq:3.8.3
Vmware » Rabbitmq » Version: 3.8.4

cpe:2.3:a:vmware:rabbitmq:3.8.4
Vmware » Rabbitmq » Version: 3.8.5

cpe:2.3:a:vmware:rabbitmq:3.8.5
Vmware » Rabbitmq » Version: 3.8.6

cpe:2.3:a:vmware:rabbitmq:3.8.6
Vmware » Rabbitmq » Version: 3.8.7

cpe:2.3:a:vmware:rabbitmq:3.8.7
Vmware » Rabbitmq » Version: 3.8.8

cpe:2.3:a:vmware:rabbitmq:3.8.8
Vmware » Rabbitmq » Version: 3.8.9

cpe:2.3:a:vmware:rabbitmq:3.8.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-32719

Products

Pricing

Contact Us