43435 matches found
BIT-RABBITMQ-2026-67410 RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint
RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 and 4.2.9, OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint CWE-200. when OAuth2 authentication is enabled for the RabbitMQ Management UI and the configured flow, IDP use a client secret, the oauthclientsecre...
BIT-RABBITMQ-2026-67239 RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI
RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 and 4.2.9 and 4.3.3, Stored XSS via TLS peer-certificate DN in stream-management UI sibling of V-11. lines 102/106/110 render peercertsubject / peercertissuer with raw and no fmtstring. RFC4514...
BIT-RABBITMQ-2026-67237 RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpoint
RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, settokenauth/2 inserted a bearer token from the Authorization header or accesstoken cookie into OAuth bootstrap JavaScript without escaping, allowing attacker-controlled token content to execute JavaScript in the...
BIT-RABBITMQ-2026-66077 RabbitMQ: Stored XSS via TLS peer-certificate DN in management UI
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, The management UI uses EJS 1.0 in which does NOT HTML-escape. connection.ejs:135 renders and peercertissuer directly into the page. The same pattern appears in streamConnection.ejs:102,106,110. The...
CLEANSTART-2024-VW81422 Incorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89
Security vulnerability affects the chromium package. Incorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89...
CLEANSTART-2024-GG92562 Incorrect security UI in Loader in Google Chrome prior to 89
Security vulnerability affects the chromium package. Incorrect security UI in Loader in Google Chrome prior to 89...
CLEANSTART-2024-UG97969 Incorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90
Security vulnerability affects the chromium package. Incorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90...
CLEANSTART-2024-JL25216 Incorrect security UI in payments in Google Chrome on Android prior to 91
Security vulnerability affects the chromium package. Incorrect security UI in payments in Google Chrome on Android prior to 91...
CLEANSTART-2024-DD50354 Incorrect security UI in Downloads in Google Chrome on Android prior to 92
Security vulnerability affects the chromium package. Incorrect security UI in Downloads in Google Chrome on Android prior to 92...
CLEANSTART-2024-MI55100 Use after free in UI framework in Google Chrome prior to 92
Security vulnerability affects the chromium package. Use after free in UI framework in Google Chrome prior to 92...
CLEANSTART-2024-FY86673 Use after free in Browser UI in Google Chrome on Chrome prior to 92
Security vulnerability affects the chromium package. Use after free in Browser UI in Google Chrome on Chrome prior to 92...
CLEANSTART-2024-OX53318 Incorrect security UI in Navigation in Google Chrome on Android prior to 92
Security vulnerability affects the chromium package. Incorrect security UI in Navigation in Google Chrome on Android prior to 92...
CLEANSTART-2024-CC87876 Use after free in Page Info UI in Google Chrome prior to 92
Security vulnerability affects the chromium package. Use after free in Page Info UI in Google Chrome prior to 92...
CLEANSTART-2024-LN29433 Chromium: CVE-2021-30621 UI Spoofing in Autofill
Security vulnerability affects the chromium package. Chromium: CVE-2021-30621 UI Spoofing in Autofill...
CLEANSTART-2024-YC99149 Chromium: CVE-2021-30619 UI Spoofing in Autofill
Security vulnerability affects the chromium package. Chromium: CVE-2021-30619 UI Spoofing in Autofill...
CLEANSTART-2024-DG80618 Incorrect security UI in Downloads in Google Chrome on Android prior to 101
Security vulnerability affects the chromium package. Incorrect security UI in Downloads in Google Chrome on Android prior to 101...
CLEANSTART-2024-ZE33362 Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101
Security vulnerability affects the chromium package. Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101...
CLEANSTART-2024-TC05917 Heap buffer overflow in Web UI Settings in Google Chrome prior to 101
Security vulnerability affects the chromium package. Heap buffer overflow in Web UI Settings in Google Chrome prior to 101...
CLEANSTART-2024-GQ88613 Use after free in Web UI Diagnostics in Google Chrome on Chrome OS prior to 101
Security vulnerability affects the chromium package. Use after free in Web UI Diagnostics in Google Chrome on Chrome OS prior to 101...