org.springframework.amqp:spring-amqp vulnerabilities (TuxCare)
8 vulnerabilities.
-
org.springframework.amqp:spring-amqpTuxCare Log4j2 AmqpAppender disables TLS hostname verification by default 6.8 Medium -
org.springframework.amqp:spring-amqpTuxCare Remote JVM termination: nested-array Java deserialization bypasses allowlist, triggers StackOverflowError, default JavaLangErrorHandler calls System.exit(99) 6.6 Medium -
org.springframework.amqp:spring-amqpTuxCare Admin password disclosed in BrokerNotAliveException message 5.3 Medium -
org.springframework.amqp:spring-amqpTuxCare Unbounded decompression of attacker-supplied compressed message bodies 6.5 Medium -
org.springframework.amqp:spring-amqpTuxCare In Spring AMQP the RabbitConnectionFactoryBean.setUri("amqps://...") bypasses secure SSL setup, uses TrustEverythingTrustManager 4.0 Medium -
org.springframework.amqp:spring-amqpTuxCare In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues 4.4 Medium -
org.springframework.amqp:spring-amqpTuxCare Deserialization of Untrusted Data in Spring AMQP 6.5 Medium -
org.springframework.amqp:spring-amqpTuxCare Deserialization of Untrusted Data in Spring AMQP 6.5 Medium