Advisories · Technology
rabbitmq-server.
Every CVE that names rabbitmq-server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations
- rabbitmq-server
- Information disclosure
- CVSS 4.9 Medium
RabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure
- rabbitmq-server
- Broken access control
- CVSS 6.8 Medium
RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks
- rabbitmq-server
- Authentication bypass
- CVSS 7.5 High
RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS
- rabbitmq-server
- Denial of service
- CVSS 7.1 High
RabbitMQ: Stored XSS in RabbitMQ management UI
- rabbitmq-server
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
RabbitMQ: UNC SSRF affecting the management UI on Windows
- rabbitmq-server
- Path traversal
- Server-side request forgery (SSRF)
- CVSS 7.1 High
RabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size
- rabbitmq-server
- Denial of service
- CVSS 5.7 Medium
RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering
- rabbitmq-server
- Cross-site scripting (XSS)
- CVSS 5.6 Medium
RabbitMQ: Unsanitized vhost names allow for XSS in management UI
- rabbitmq-server
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
RabbitMQ MQTT Topic Permission Authorization Bypass
- rabbitmq-server
- Broken access control
- CVSS 6.7 Medium
RabbitMQ Node can log Basic Auth header from an HTTP request
- rabbitmq-server
- Information disclosure
- CVSS 6.1 Medium
RabbitMQ has XSS Vulnerability in an Error Message in Management UI
- rabbitmq-server
- Cross-site scripting (XSS)
- CVSS 3.1 Low
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management plugin
- rabbitmq-server
- Cross-site scripting (XSS)
- CVSS 3.1 Low
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI
- rabbitmq-server
- Cross-site scripting (XSS)