rabbitmq-server vulnerabilities (openSUSE)
18 vulnerabilities.
-
rabbitmq-serveropenSUSE RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass 7.0 High -
rabbitmq-serveropenSUSE RabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users 5.3 Medium -
rabbitmq-serveropenSUSE RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom 7.0 High -
rabbitmq-serveropenSUSE RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations 8.7 High -
rabbitmq-serveropenSUSE RabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure 4.9 Medium -
rabbitmq-serveropenSUSE RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks 6.8 Medium -
rabbitmq-serveropenSUSE RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS 7.5 High -
rabbitmq-serveropenSUSE RabbitMQ: Stored XSS in RabbitMQ management UI 7.1 High -
rabbitmq-serveropenSUSE RabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size 7.1 High -
rabbitmq-serveropenSUSE RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering 5.7 Medium -
rabbitmq-serveropenSUSE RabbitMQ: Unsanitized vhost names allow for XSS in management UI 5.6 Medium -
rabbitmq-serveropenSUSE RabbitMQ Node can log Basic Auth header from an HTTP request 6.7 Medium -
rabbitmq-serveropenSUSE RabbitMQ has XSS Vulnerability in an Error Message in Management UI 6.1 Medium -
rabbitmq-serveropenSUSE Denial of Service by publishing large messages over the HTTP API 4.9 Medium -
rabbitmq-serveropenSUSE Predictable credential obfuscation seed value used in rabbitmq-server 5.5 Medium -
rabbitmq-serveropenSUSE Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management plugin 3.1 Low -
rabbitmq-serveropenSUSE Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI 3.1 Low -
rabbitmq-serveropenSUSE RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to... 7.5 High