Lucene search

K
githubGitHub Advisory DatabaseGHSA-W4G2-9HJ6-5472
HistoryOct 18, 2018 - 6:06 p.m.

Moderate severity vulnerability that affects com.rabbitmq:amqp-client and org.springframework.amqp:spring-amqp

2018-10-1818:06:08
CWE-295
GitHub Advisory Database
github.com
21

0.001 Low

EPSS

Percentile

47.6%

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit.

0.001 Low

EPSS

Percentile

47.6%

Related for GHSA-W4G2-9HJ6-5472