org.springframework.amqp:spring-rabbit vulnerabilities (TuxCare)
8 vulnerabilities.
-
org.springframework.amqp:spring-rabbitTuxCare Log4j2 AmqpAppender disables TLS hostname verification by default 6.8 Medium -
org.springframework.amqp:spring-rabbitTuxCare Remote JVM termination: nested-array Java deserialization bypasses allowlist, triggers StackOverflowError, default JavaLangErrorHandler calls System.exit(99) 6.6 Medium -
org.springframework.amqp:spring-rabbitTuxCare Admin password disclosed in BrokerNotAliveException message 5.3 Medium -
org.springframework.amqp:spring-rabbitTuxCare Unbounded decompression of attacker-supplied compressed message bodies 6.5 Medium -
org.springframework.amqp:spring-rabbitTuxCare In Spring AMQP the RabbitConnectionFactoryBean.setUri("amqps://...") bypasses secure SSL setup, uses TrustEverythingTrustManager 4.0 Medium -
org.springframework.amqp:spring-rabbitTuxCare In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues 4.4 Medium -
org.springframework.amqp:spring-rabbitTuxCare Deserialization of Untrusted Data in Spring AMQP 6.5 Medium -
org.springframework.amqp:spring-rabbitTuxCare Deserialization of Untrusted Data in Spring AMQP 6.5 Medium