CVE:CVE-2019-11281
CNNVD:CNNVD-201910-827
Pivotal Software RabbitMQ是美国Pivotal Software公司的一套实现了高级消息队列协议（AMQP）的开源消息代理软件。
Pivotal Software RabbitMQ中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。以下产品及版本受到影响：Pivotal Software RabbitMQ 3.7.18之前版本；RabbitMQ for PCF 1.15.13之前的1.15.x版本，1.16.6之前的1.16.x版本，1.17.3之的1.17.x前版本。
solution:Upgrade pivotal_software rabbitmq to a higher version than 3.7.18,1.15.13,1.16.6,1.17.3,and avoid the version (,3.7.18),[1.15.0,1.15.13),[1.16.0,1.16.6),[1.17.0,1.17.3); Upgrade redhat openstack to a higher version than 15,and avoid the version 15; Upgrade redhat openstack_for_ibm_power to a higher version than 15,and avoid the version 15; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31