rabbitmq-server vulnerabilities (SUSE)
56 vulnerabilities.
-
rabbitmq-serverSUSE RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass 7.0 High -
rabbitmq-serverSUSE RabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users 5.3 Medium -
rabbitmq-serverSUSE RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom 7.0 High -
rabbitmq-serverSUSE RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations 8.7 High -
rabbitmq-serverSUSE RabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure 4.9 Medium -
rabbitmq-serverSUSE RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks 6.8 Medium -
rabbitmq-serverSUSE RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS 7.5 High -
rabbitmq-serverSUSE RabbitMQ: Stored XSS in RabbitMQ management UI 7.1 High -
rabbitmq-serverSUSE RabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size 7.1 High -
rabbitmq-serverSUSE RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering 5.7 Medium -
rabbitmq-serverSUSE RabbitMQ: Unsanitized vhost names allow for XSS in management UI 5.6 Medium -
rabbitmq-serverSUSE RabbitMQ Node can log Basic Auth header from an HTTP request 6.7 Medium -
rabbitmq-serverSUSE RabbitMQ has XSS Vulnerability in an Error Message in Management UI 6.1 Medium -
rabbitmq-serverSUSE Denial of Service by publishing large messages over the HTTP API 4.9 Medium -
rabbitmq-serverSUSE Predictable credential obfuscation seed value used in rabbitmq-server 5.5 Medium -
rabbitmq-serverSUSE Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection 9.8 Critical -
rabbitmq-serverSUSE SQL Injection in Django 9.8 Critical -
rabbitmq-serverSUSE HTTP Request Smuggling in puma 9.1 Critical -
rabbitmq-serverSUSE golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High -
rabbitmq-serverSUSE Snapshot authentication bypass in grafana 9.8 Critical -
rabbitmq-serverSUSE Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management plugin 3.1 Low -
rabbitmq-serverSUSE Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI 3.1 Low -
rabbitmq-serverSUSE RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to... 7.5 High -
rabbitmq-serverSUSE It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in... 4.3 Medium -
rabbitmq-serverSUSE Server Side Request Forgery in Grafana 8.2 High -
rabbitmq-serverSUSE XSS in Django 6.1 Medium -
rabbitmq-serverSUSE Data leakage via cache key collision in Django 5.9 Medium -
rabbitmq-serverSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 6.8 Medium -
rabbitmq-serverSUSE HTTP Smuggling via Transfer-Encoding Header in Puma 7.5 High -
rabbitmq-serverSUSE Information disclosure issue in Active Resource 7.5 High -
rabbitmq-serverSUSE Grafana version < 6.7.3 is vulnerable for annotation popup XSS. 6.1 Medium -
rabbitmq-serverSUSE Unsafe object creation in json RubyGem 7.5 High -
rabbitmq-serverSUSE OS Command Injection in ansible 7.4 High -
rabbitmq-serverSUSE HTTP Response Splitting in Puma 6.5 Medium -
rabbitmq-serverSUSE Improper Verification of Cryptographic Signature in PySAML2 7.5 High -
rabbitmq-serverSUSE Uncontrolled Resource Consumption in Pillow 7.5 High -
rabbitmq-serverSUSE PCX P mode buffer overflow in Pillow 9.8 Critical -
rabbitmq-serverSUSE Out-of-bounds Read in Pillow 7.1 High -
rabbitmq-serverSUSE HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers 7.1 High -
rabbitmq-serverSUSE HTTP Request Smuggling: Content-Length Sent Twice in Waitress 7.1 High -
rabbitmq-serverSUSE HTTP Request Smuggling: LF vs CRLF handling in Waitress 7.1 High -
rabbitmq-serverSUSE HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress 7.1 High -
rabbitmq-serverSUSE Django Potential account hijack via password reset form 9.8 Critical -
rabbitmq-serverSUSE RabbitMQ Web Management Plugin DoS via heap overflow 4.5 Medium -
rabbitmq-serverSUSE Double Free in psutil 7.5 High -
rabbitmq-serverSUSE DOS attack in Pillow when processing specially crafted image files 7.5 High -
rabbitmq-serverSUSE In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This... 7.5 High -
rabbitmq-serverSUSE memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str... 7.5 High -
rabbitmq-serverSUSE Access control bypass in Apache ZooKeeper 5.9 Medium -
rabbitmq-serverSUSE In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru... 7.5 High - Show olderLoading…