cn.bctools:jvs-starter-rabbit (>=1.0.0, <=2.1.0), cn.dustlight.datacenter:datacenter-amqp (0.0.6-alpha-2) +252 more potentially affected by CVE-2021-22097 via org.springframework.amqp:spring-amqp (>=2.3.0, <=2.3.10)

org.springframework.amqp:spring-amqp MAVEN version =2.3.0, =1.0.0, =0.1.3-alpha, =1.1.0, =1.1.0, =1.1.0, =1.0.5, =0.0.6, =0.2.6, =0.2.6, =0.2.6, =0.4.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2021-22097 Source advisory: GHSA-FX7F-RJQJ-52PJ...

Deserialization of Untrusted Data in Spring AMQP

In Spring AMQP versions 2.2.0 - 2.2.18 and 2.3.0 - 2.3.10, the Spring AMQP Message object, in its toString method, will deserialize a body for a message with content type application/x-java-serialized-object. It is possible to construct a malicious java.util.Dictionary object that can cause 100%...

cn.bctools:jvs-starter-rabbit (>=1.0.0, <=2.1.0), cn.dustlight.datacenter:datacenter-amqp (0.0.6-alpha-2) +252 more potentially affected by CVE-2021-22097 via org.springframework.amqp:spring-amqp (>=2.3.0, <=2.3.10)

org.springframework.amqp:spring-amqp MAVEN version =2.3.0, =1.0.0, =0.1.3-alpha, =1.1.0, =1.1.0, =1.1.0, =1.0.5, =0.0.6, =0.2.6, =0.2.6, =0.2.6, =0.4.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2021-22097 Source advisory: OSV:GHSA-FX7F-RJQJ-52PJ...

br.jus.stf.digital:core (0.1.0), br.jus.stf.digital:test (>=1.0.0-rc, <=1.0.2) +134 more potentially affected by CVE-2017-8045 via org.springframework.amqp:spring-amqp (>=1.6.0.release, <=1.6.10.release)

org.springframework.amqp:spring-amqp MAVEN version =1.6.0.release, =1.0.0-rc, =1.0.6.oss, =1.0.6.oss, =1.1.1-release, =1.1.1-release, =1.1.1-release, =1.1.1-release, =1.1.1-release, =1.1.36-release - com.bq.corbel.lib:rabbitmq 0.11.0 - com.bq.corbel.lib:ws 0.24.0 - com.bq.corbel:evci 1.35.0 -...

br.jus.stf.digital:core (0.1.0), br.jus.stf.digital:test (>=1.0.0-rc, <=1.0.2) +134 more potentially affected by CVE-2017-8045 via org.springframework.amqp:spring-amqp (>=1.6.0.release, <=1.6.10.release)

org.springframework.amqp:spring-amqp MAVEN version =1.6.0.release, =1.0.0-rc, =1.0.6.oss, =1.0.6.oss, =1.1.1-release, =1.1.1-release, =1.1.1-release, =1.1.1-release, =1.1.1-release, =1.1.36-release - com.bq.corbel.lib:rabbitmq 0.11.0 - com.bq.corbel.lib:ws 0.24.0 - com.bq.corbel:evci 1.35.0 -...

br.jus.stf.digital:core (>=0.2.0, <=2.3.1), cn.springcloud.gray:spring-cloud-gray-plugin-event-stream (a.1.1.0) +108 more potentially affected by CVE-2017-8045 via org.springframework.amqp:spring-amqp (>=1.7.0.release, <=1.7.3.release)

org.springframework.amqp:spring-amqp MAVEN version =1.7.0.release, =0.2.0, =1.1.0, =1.1.0, =v1.0.0, =0.8, =0.8, =1.0.2-release, =1.1.0-release and more Source cves: CVE-2017-8045 Source advisory: GHSA-VQQG-XGV7-CF68...

cc.voox:publisher (0.1.2.ga), com.ahome-it:ahome-tooling-server-core (1.1.0-release) +215 more potentially affected by CVE-2017-8045 via org.springframework.amqp:spring-amqp (>=1.0.0.release, <=1.5.6.release)

org.springframework.amqp:spring-amqp MAVEN version =1.0.0.release, =1.0, =1.0, =0.9.0, =0.20.0, =1.31.1, =1.27.1, =1.31.0, =1.31.1, =1.31.1, =1.34.1 and more Source cves: CVE-2017-8045 Source advisory: GHSA-VQQG-XGV7-CF68...

Deserialization of Untrusted Data in Spring AMQP

In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack...

cc.voox:publisher (0.1.2.ga), com.ahome-it:ahome-tooling-server-core (1.1.0-release) +215 more potentially affected by CVE-2017-8045 via org.springframework.amqp:spring-amqp (>=1.0.0.release, <=1.5.6.release)

org.springframework.amqp:spring-amqp MAVEN version =1.0.0.release, =1.0, =1.0, =0.9.0, =0.20.0, =1.31.1, =1.27.1, =1.31.0, =1.31.1, =1.31.1, =1.34.1 and more Source cves: CVE-2017-8045 Source advisory: OSV:GHSA-VQQG-XGV7-CF68...

br.jus.stf.digital:core (>=0.2.0, <=2.3.1), cn.springcloud.gray:spring-cloud-gray-plugin-event-stream (a.1.1.0) +108 more potentially affected by CVE-2017-8045 via org.springframework.amqp:spring-amqp (>=1.7.0.release, <=1.7.3.release)

org.springframework.amqp:spring-amqp MAVEN version =1.7.0.release, =0.2.0, =1.1.0, =1.1.0, =v1.0.0, =0.8, =0.8, =1.0.2-release, =1.1.0-release and more Source cves: CVE-2017-8045 Source advisory: OSV:GHSA-VQQG-XGV7-CF68...

GHSA-HRP3-8P5W-27GV Improper Input Validation in Spring AMQP

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...

Improper Input Validation in Spring AMQP

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...

cc.voox:publisher (0.1.2.ga), com.bluejeans:ipc-channel-utils (>=1.0, <=1.0.1) +141 more potentially affected by CVE-2016-2173 via org.springframework.amqp:spring-amqp (>=1.0.0.release, <=1.5.4.release)

org.springframework.amqp:spring-amqp MAVEN version =1.0.0.release, =1.0, =1.0, =0.9.0, =0.20.0, =1.31.1, =1.27.1, =1.31.0, =1.31.1, =1.31.1, =1.31.1, =1.31.1, =1.31.1, =1.31.1, =1.34.1 - com.bq.oss.corbel:evci 1.20.0 and more Source cves: CVE-2016-2173 Source advisory: OSV:GHSA-HRP3-8P5W-27GV...

cc.voox:publisher (0.1.2.ga), com.bluejeans:ipc-channel-utils (>=1.0, <=1.0.1) +141 more potentially affected by CVE-2016-2173 via org.springframework.amqp:spring-amqp (>=1.0.0.release, <=1.5.4.release)

org.springframework.amqp:spring-amqp MAVEN version =1.0.0.release, =1.0, =1.0, =0.9.0, =0.20.0, =1.31.1, =1.27.1, =1.31.0, =1.31.1, =1.31.1, =1.31.1, =1.31.1, =1.31.1, =1.31.1, =1.34.1 - com.bq.oss.corbel:evci 1.20.0 and more Source cves: CVE-2016-2173 Source advisory: GHSA-HRP3-8P5W-27GV...

Spring AMQP RabbitMQ toString() DoS

The vulnerability of the toString method implementation in the Spring AMQP RabbitMQ messaging application is related to the restoration of unreliable data in memory during the processing of Dictionary objects from the java.util class. Exploiting this vulnerability could allow an attacker to cause...

cn.bctools:jvs-starter-rabbit (>=1.0.0, <=2.1.0), cn.dustlight.datacenter:datacenter-amqp (0.0.6-alpha-2) +252 more potentially affected by CVE-2021-22095 via org.springframework.amqp:spring-amqp (>=2.3.0, <=2.3.10)

org.springframework.amqp:spring-amqp MAVEN version =2.3.0, =1.0.0, =0.1.3-alpha, =1.1.0, =1.1.0, =1.1.0, =1.0.5, =0.0.6, =0.2.6, =0.2.6, =0.2.6, =0.4.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2021-22095 Source advisory: GHSA-945Q-CH46-PCHG...

ai.hyacinth.framework:core-service-bus-support (0.5.24), br.com.itsme:commons (>=0.0.4-alpha, <=0.0.5-alpha) +329 more potentially affected by CVE-2021-22095 via org.springframework.amqp:spring-amqp (>=2.2.0.release, <=2.2.19.release)

org.springframework.amqp:spring-amqp MAVEN version =2.2.0.release, =0.0.4-alpha, =1.2.0-release, =0.0.3, =1.3.0.alpha, =1.4.1, =1.3.0-beta, =1.3.0.alpha, =1.4.1, =2.2.4, =2.2.8 and more Source cves: CVE-2021-22095 Source advisory: GHSA-945Q-CH46-PCHG...

GHSA-945Q-CH46-PCHG Deserialization of Untrusted Data in Spring AMQP

In Spring AMQP versions 2.2.0 - 2.2.19 and 2.3.0 - 2.3.11, the Spring AMQP Message object, in its toString method, will create a new String object from the message body, regardless of its size. This can cause an OOM Error with a large message...

cn.bctools:jvs-starter-rabbit (>=1.0.0, <=2.1.0), cn.dustlight.datacenter:datacenter-amqp (0.0.6-alpha-2) +252 more potentially affected by CVE-2021-22095 via org.springframework.amqp:spring-amqp (>=2.3.0, <=2.3.10)

org.springframework.amqp:spring-amqp MAVEN version =2.3.0, =1.0.0, =0.1.3-alpha, =1.1.0, =1.1.0, =1.1.0, =1.0.5, =0.0.6, =0.2.6, =0.2.6, =0.2.6, =0.4.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2021-22095 Source advisory: OSV:GHSA-945Q-CH46-PCHG...

CVE-2021-22095

In Spring AMQP versions 2.2.0 - 2.2.19 and 2.3.0 - 2.3.11, the Spring AMQP Message object, in its toString method, will create a new String object from the message body, regardless of its size. This can cause an OOM Error with a large message...