rabbitmq-server4.3 vulnerabilities (Red Hat)
73 vulnerabilities.
rabbitmq-server4.3Red HatRabbitMQ: CORS * reflects Origin with Allow-Credentials7.6 Highrabbitmq-server4.3Red HatRabbitMQ: Monitoring-tag DELETE of auth-attempt metrics2.3 Lowrabbitmq-server4.3Red HatRabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs5.6 Mediumrabbitmq-server4.3Red HatRabbitMQ: Stream protocol skips per vhost per user connection limits6.0 Mediumrabbitmq-server4.3Red HatRabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checks6.3 Mediumrabbitmq-server4.3Red HatRabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression6.0 Mediumrabbitmq-server4.3Red HatLink Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/16.3 Mediumrabbitmq-server4.3Red HatCowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion6.9 Mediumrabbitmq-server4.3Red HatUnbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS8.7 Highrabbitmq-server4.3Red HatRabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass7.0 Highrabbitmq-server4.3Red HatRabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users5.3 Mediumrabbitmq-server4.3Red HatRabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom7.0 Highrabbitmq-server4.3Red HatRabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations8.7 Highrabbitmq-server4.3Red HatRabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure4.9 Mediumrabbitmq-server4.3Red HatRabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks6.8 Mediumrabbitmq-server4.3Red HatRabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS7.5 Highrabbitmq-server4.3Red HatRabbitMQ: Stored XSS in RabbitMQ management UI7.1 Highrabbitmq-server4.3Red HatRabbitMQ: UNC SSRF affecting the management UI on Windows6.5 Mediumrabbitmq-server4.3Red HatRabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size7.1 Highrabbitmq-server4.3Red HatRabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering5.7 Mediumrabbitmq-server4.3Red HatRabbitMQ: Unsanitized vhost names allow for XSS in management UI5.6 Mediumrabbitmq-server4.3Red HatRabbitMQ MQTT Topic Permission Authorization Bypass5.3 Medium