org.springframework.amqp:spring-rabbit-junit vulnerabilities (TuxCare)
6 vulnerabilities.
-
org.springframework.amqp:spring-rabbit-junitTuxCare Log4j2 AmqpAppender disables TLS hostname verification by default 6.8 Medium -
org.springframework.amqp:spring-rabbit-junitTuxCare Remote JVM termination: nested-array Java deserialization bypasses allowlist, triggers StackOverflowError, default JavaLangErrorHandler calls System.exit(99) 6.6 Medium -
org.springframework.amqp:spring-rabbit-junitTuxCare Admin password disclosed in BrokerNotAliveException message 5.3 Medium -
org.springframework.amqp:spring-rabbit-junitTuxCare Unbounded decompression of attacker-supplied compressed message bodies 6.5 Medium -
org.springframework.amqp:spring-rabbit-junitTuxCare In Spring AMQP the RabbitConnectionFactoryBean.setUri("amqps://...") bypasses secure SSL setup, uses TrustEverythingTrustManager 4.0 Medium -
org.springframework.amqp:spring-rabbit-junitTuxCare In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues 4.4 Medium