rabbitmq-server vulnerabilities (openEuler)
12 vulnerabilities.
-
rabbitmq-serveropenEuler RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS 8.2 High -
rabbitmq-serveropenEuler RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression 6.0 Medium -
rabbitmq-serveropenEuler RabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users 5.3 Medium -
rabbitmq-serveropenEuler RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom 7.0 High -
rabbitmq-serveropenEuler RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks 6.8 Medium -
rabbitmq-serveropenEuler RabbitMQ: Stored XSS in RabbitMQ management UI 7.1 High -
rabbitmq-serveropenEuler RabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size 7.1 High -
rabbitmq-serveropenEuler RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering 5.7 Medium -
rabbitmq-serveropenEuler RabbitMQ: Unsanitized vhost names allow for XSS in management UI 5.6 Medium -
rabbitmq-serveropenEuler RabbitMQ has XSS Vulnerability in an Error Message in Management UI 6.1 Medium -
rabbitmq-serveropenEuler Denial of Service by publishing large messages over the HTTP API 4.9 Medium -
rabbitmq-serveropenEuler RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to... 7.5 High