IBM MQ for HPE NonStop Information Disclosure Vulnerability

IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. An information disclosure vulnerability exists in IBM MQ for HPE NonStop version 8.1.0, which can be exploited b...

Denial Of Service (DoS)

spring-messaging is vulnerable to denial of service. The vulnerability exists because the handleMessageInternal function of SimpleBrokerMessageHandler.java does not properly handle to ignore the invalid STOMP frames, allowing an attacker to cause an application crash through the WebSocket endpoin...

GHSA-G3GJ-632X-FHRH SSRF vulnerability due to missing permission check in Jenkins JMS Messaging Plugin

A server-side request forgery vulnerability exists in Jenkins JMS Messaging Plugin 1.1.1 and earlier in SSLCertificateAuthenticationMethod.java, UsernameAuthenticationMethod.java that allows attackers with Overall/Read permission to have Jenkins connect to a JMS endpoint...

SSRF vulnerability due to missing permission check in Jenkins JMS Messaging Plugin

A server-side request forgery vulnerability exists in Jenkins JMS Messaging Plugin 1.1.1 and earlier in SSLCertificateAuthenticationMethod.java, UsernameAuthenticationMethod.java that allows attackers with Overall/Read permission to have Jenkins connect to a JMS endpoint...

GHSA-M7CC-6VHG-39WR Moodle improper access control

Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct spam attacks via the messaging API...

Moodle improper access control

Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct spam attacks via the messaging API...

GHSA-4JM2-C9JR-6PRF Moodle allows attackers to bypass a messaging-disabled setting

message/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to bypass a messaging-disabled setting via a web-services request, as demonstrated by a people-search request...

Moodle allows attackers to bypass a messaging-disabled setting

message/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to bypass a messaging-disabled setting via a web-services request, as demonstrated by a people-search request...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.0, <=2.2), com.ahome-it:ahome-tooling-server-core (>=1.1.4-release, <=1.1.9-release) +58 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.1.release)

org.springframework:spring-messaging MAVEN version 4.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =2.0, =1.1.4-release, =1.1.4-release,...

com.kurento.kmf:kmf-broker (4.3.0) potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.1.release)

org.springframework:spring-messaging MAVEN version 4.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - com.kurento.kmf:kmf-broker 4.3.0 Source cves: CVE-2022-22971 Source advisory:...

org.projectreactor.spring:reactor-spring-messaging (>=1.1.0.release, <=1.1.3.release), org.springframework.integration:spring-integration-amqp (4.0.0.release) +26 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.3.release)

org.springframework:spring-messaging MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - org.projectreactor.spring:reactor-spring-messaging =1.1.0.release, =1.1.3.relea...

com.blitline:blitline-image-client-spring (>=0.10.1, <=0.12.0) potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.4.release)

org.springframework:spring-messaging MAVEN version 4.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - com.blitline:blitline-image-client-spring =0.10.1, =0.12.0 Source cves:...

io.oasp.java.modules:oasp4j-batch (>=1.5.0, <=2.6.1), org.springframework.batch:spring-batch-integration (>=3.0.0.release, <=3.0.8.release) +29 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.5.release)

org.springframework:spring-messaging MAVEN version 4.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - io.oasp.java.modules:oasp4j-batch =1.5.0, =3.0.0.release, =1.1.0.release,...

com.kurento.kmf:kmf-broker (4.3.1), net.gplatform:sudoor-server-lib (>=1.0.4, <=1.0.12) +49 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.6.release)

org.springframework:spring-messaging MAVEN version 4.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - com.kurento.kmf:kmf-broker 4.3.1 - net.gplatform:sudoor-server-lib =1.0.4,...

ca.jeb:common-java (2014.10.01), ca.jeb:protobuf-serializer (2014.10.01) +69 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.7.release)

org.springframework:spring-messaging MAVEN version 4.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - ca.jeb:common-java 2014.10.01 - ca.jeb:protobuf-serializer 2014.10.01 -...

org.springframework.boot:spring-boot-starter-integration (>=1.1.9.release, <=1.1.10.release), org.springframework.integration:spring-integration-amqp (>=4.0.6.release, <=4.0.7.release) +27 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.8.release)

org.springframework:spring-messaging MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - org.springframework.boot:spring-boot-starter-integration =1.1.9.release,...

org.springframework.batch:spring-batch-integration (3.0.9.release), org.springframework.boot:spring-boot-starter-integration (>=1.1.11.release, <=1.1.12.release) +27 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.9.release)

org.springframework:spring-messaging MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - org.springframework.batch:spring-batch-integration 3.0.9.release -...

org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-jms (>=4.1.0.release_1, <=4.1.0.release_5), org.jiucai:appframework (2.0.0) +2 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.1.0.release)

org.springframework:spring-messaging MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-jms...

com.github.dcshock:forklift (>=0.1, <=0.7), com.github.dcshock:forklift-activemq (>=0.1, <=0.3) +8 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.1.1.release)

org.springframework:spring-messaging MAVEN version 4.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - com.github.dcshock:forklift =0.1, =0.1, =0.1, =0.1, =0.3, =4.1.1.release1, =1.0...

com.bq.oss.corbel:event-bus (1.19.2), com.bq.oss.corbel:events (1.19.2) +78 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.1.2.release)

org.springframework:spring-messaging MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - com.bq.oss.corbel:event-bus 1.19.2 - com.bq.oss.corbel:events 1.19.2 -...