Vulnerabilities > Broadcom > Rabbitmq Server > 3.7.9

DATE CVE VULNERABILITY TITLE RISK
2019-11-22 CVE-2019-11291 Cross-site Scripting vulnerability in multiple products
Pivotal RabbitMQ, 3.7 versions prior to v3.7.20 and 3.8 version prior to v3.8.1, and RabbitMQ for PCF, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain two endpoints, federation and shovel, which do not properly sanitize user input.
network
low complexity
vmware broadcom redhat CWE-79
4.8
4.8