rabbitmq vulnerabilities (Bitnami)
69 vulnerabilities.
rabbitmqBitnamiRabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values6.0 MediumrabbitmqBitnamiRabbitMQ: CORS * reflects Origin with Allow-Credentials7.6 HighrabbitmqBitnamiRabbitMQ: Monitoring-tag DELETE of auth-attempt metrics2.3 LowrabbitmqBitnamiRabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs5.6 MediumrabbitmqBitnamiRabbitMQ: Stream protocol skips per vhost per user connection limits6.0 MediumrabbitmqBitnamiRabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checks6.3 MediumrabbitmqBitnamiRabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression6.0 MediumrabbitmqBitnamiRabbitMQ: Unsanitized vhost names allow for XSS in management UI5.6 MediumrabbitmqBitnamiRabbitMQ MQTT Topic Permission Authorization Bypass5.3 MediumrabbitmqBitnamiRabbitMQ Node can log Basic Auth header from an HTTP request6.7 MediumrabbitmqBitnamiRabbitMQ has XSS Vulnerability in an Error Message in Management UI6.1 MediumrabbitmqBitnamiHTTP API's queue deletion endpoint does not verify that the user has a required permission6.5 MediumrabbitmqBitnamiDenial of Service by publishing large messages over the HTTP API4.9 MediumrabbitmqBitnamiPredictable credential obfuscation seed value used in rabbitmq-server5.5 MediumrabbitmqBitnamiImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management plugin3.1 LowrabbitmqBitnamiImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI3.1 LowrabbitmqBitnamiRabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to...7.5 HighrabbitmqBitnamiRabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions...7.8 HighrabbitmqBitnamiRabbitMQ arbitrary code execution using local binary planting6.7 Medium