rabbitmq-server vulnerabilities (Ubuntu)
83 vulnerabilities.
rabbitmq-serverUbuntuRabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values6.0 Mediumrabbitmq-serverUbuntuRabbitMQ: CORS * reflects Origin with Allow-Credentials7.6 Highrabbitmq-serverUbuntuRabbitMQ: Monitoring-tag DELETE of auth-attempt metrics2.3 Lowrabbitmq-serverUbuntuRabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs5.6 Mediumrabbitmq-serverUbuntuRabbitMQ: Stream protocol skips per vhost per user connection limits6.0 Mediumrabbitmq-serverUbuntuRabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checks6.3 Mediumrabbitmq-serverUbuntuRabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression6.0 Mediumrabbitmq-serverUbuntuCowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion6.9 Mediumrabbitmq-serverUbuntuUnbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS8.7 Highrabbitmq-serverUbuntuRabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass7.0 Highrabbitmq-serverUbuntuRabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users5.3 Mediumrabbitmq-serverUbuntuRabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom7.0 Highrabbitmq-serverUbuntuRabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations8.7 Highrabbitmq-serverUbuntuRabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure4.9 Mediumrabbitmq-serverUbuntuRabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks6.8 Mediumrabbitmq-serverUbuntuRabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS7.5 Highrabbitmq-serverUbuntuRabbitMQ: Stored XSS in RabbitMQ management UI7.1 Highrabbitmq-serverUbuntuRabbitMQ: UNC SSRF affecting the management UI on Windows6.5 Mediumrabbitmq-serverUbuntuRabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size7.1 Highrabbitmq-serverUbuntuRabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering5.7 Mediumrabbitmq-serverUbuntuRabbitMQ Node can log Basic Auth header from an HTTP request6.7 Mediumrabbitmq-serverUbuntuRabbitMQ has XSS Vulnerability in an Error Message in Management UI6.1 Mediumrabbitmq-serverUbuntuDenial of Service by publishing large messages over the HTTP API4.9 Mediumrabbitmq-serverUbuntuImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management plugin3.1 Lowrabbitmq-serverUbuntuImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI3.1 Lowrabbitmq-serverUbuntuRabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to...7.5 Highrabbitmq-serverUbuntuRabbitMQ Web Management Plugin DoS via heap overflow4.5 Mediumrabbitmq-serverUbuntuRabbitMQ cluster compromise due to deterministically generated cookie8.5 Highrabbitmq-serverUbuntuAn issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x...6.1 Mediumrabbitmq-serverUbuntuAn issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x...7.8 Highrabbitmq-serverUbuntuAn issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x...6.1 Mediumrabbitmq-serverUbuntuAn issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ...9.8 Criticalrabbitmq-serverUbuntuThe Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain...6.5 Medium