rabbitmq-server vulnerabilities (Debian)
89 vulnerabilities.
rabbitmq-serverDebianRabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values6.0 Mediumrabbitmq-serverDebianRabbitMQ: CORS * reflects Origin with Allow-Credentials7.6 Highrabbitmq-serverDebianRabbitMQ: Monitoring-tag DELETE of auth-attempt metrics2.3 Lowrabbitmq-serverDebianRabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs5.6 Mediumrabbitmq-serverDebianRabbitMQ: Stream protocol skips per vhost per user connection limits6.0 Mediumrabbitmq-serverDebianRabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checks6.3 Mediumrabbitmq-serverDebianRabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression6.0 Mediumrabbitmq-serverDebianRabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass7.0 Highrabbitmq-serverDebianRabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users5.3 Mediumrabbitmq-serverDebianRabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom7.0 Highrabbitmq-serverDebianRabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations8.7 Highrabbitmq-serverDebianRabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure4.9 Mediumrabbitmq-serverDebianRabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks6.8 Mediumrabbitmq-serverDebianRabbitMQ: Stored XSS in RabbitMQ management UI7.1 Highrabbitmq-serverDebianRabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size7.1 Highrabbitmq-serverDebianRabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering5.7 Mediumrabbitmq-serverDebianHTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/26.3 Mediumrabbitmq-serverDebianRabbitMQ: Unsanitized vhost names allow for XSS in management UI5.6 Mediumrabbitmq-serverDebianRabbitMQ Node can log Basic Auth header from an HTTP request6.7 Mediumrabbitmq-serverDebianRabbitMQ has XSS Vulnerability in an Error Message in Management UI6.1 Mediumrabbitmq-serverDebianDenial of Service by publishing large messages over the HTTP API4.9 Mediumrabbitmq-serverDebianPredictable credential obfuscation seed value used in rabbitmq-server5.5 Mediumrabbitmq-serverDebianrabbitmq-server - regression updateNo scorerabbitmq-serverDebianImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management plugin3.1 Lowrabbitmq-serverDebianImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI3.1 Lowrabbitmq-serverDebianRabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to...7.5 Highrabbitmq-serverDebianRabbitMQ Web Management Plugin DoS via heap overflow4.5 Mediumrabbitmq-serverDebianRabbitMQ XSS attack via federation and shovel endpoints3.1 Lowrabbitmq-serverDebianRabbitMQ XSS attack2.4 Lowrabbitmq-serverDebianRabbitMQ cluster compromise due to deterministically generated cookie8.5 Highrabbitmq-serverDebianAn issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x...6.1 Mediumrabbitmq-serverDebianAn issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x...7.8 Highrabbitmq-serverDebianAn issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x...6.1 Mediumrabbitmq-serverDebianAn issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ...9.8 Criticalrabbitmq-serverDebianThe Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain...6.5 Mediumrabbitmq-serverDebianCRLF injection vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4...5.0 Mediumrabbitmq-serverDebianCross-site scripting (XSS) vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x...4.3 Mediumrabbitmq-serverDebianRabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a...5.0 Mediumrabbitmq-serverDebianMultiple cross-site scripting (XSS) vulnerabilities in the management web UI in the RabbitMQ...3.5 Low