CVE-2022-22784

The Zoom Client for Meetings for Android, iOS, Linux, MacOS, and Windows before version 5.10.0 failed to properly parse XML stanzas in XMPP messages. This can allow a malicious user to break out of the current XMPP message context and create a new message context to have the receiving users clien...

CVE-2022-1753

A vulnerability, which was classified as critical, was found in WoWonder. Affected is the file /requests.php which is responsible to handle group messages. The manipulation of the argument groupid allows posting messages in other groups. It is possible to launch the attack remotely but it might...

IBM MQ for HPE NonStop Information Disclosure Vulnerability

IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. An information disclosure vulnerability exists in IBM MQ for HPE NonStop version 8.1.0, which can be exploited b...

Denial Of Service (DoS)

spring-messaging is vulnerable to denial of service. The vulnerability exists because the handleMessageInternal function of SimpleBrokerMessageHandler.java does not properly handle to ignore the invalid STOMP frames, allowing an attacker to cause an application crash through the WebSocket endpoin...

SSRF vulnerability due to missing permission check in Jenkins JMS Messaging Plugin

A server-side request forgery vulnerability exists in Jenkins JMS Messaging Plugin 1.1.1 and earlier in SSLCertificateAuthenticationMethod.java, UsernameAuthenticationMethod.java that allows attackers with Overall/Read permission to have Jenkins connect to a JMS endpoint...

GHSA-G3GJ-632X-FHRH SSRF vulnerability due to missing permission check in Jenkins JMS Messaging Plugin

A server-side request forgery vulnerability exists in Jenkins JMS Messaging Plugin 1.1.1 and earlier in SSLCertificateAuthenticationMethod.java, UsernameAuthenticationMethod.java that allows attackers with Overall/Read permission to have Jenkins connect to a JMS endpoint...

GHSA-M7CC-6VHG-39WR Moodle improper access control

Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct spam attacks via the messaging API...

Moodle improper access control

Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct spam attacks via the messaging API...

Moodle allows attackers to bypass a messaging-disabled setting

message/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to bypass a messaging-disabled setting via a web-services request, as demonstrated by a people-search request...

GHSA-4JM2-C9JR-6PRF Moodle allows attackers to bypass a messaging-disabled setting

message/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to bypass a messaging-disabled setting via a web-services request, as demonstrated by a people-search request...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.6), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.6) +40 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.0.release)

org.springframework:spring-messaging MAVEN version 4.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.6 -...

com.bq.corbel.lib:rabbitmq (0.11.0), com.bq.corbel.lib:ws (0.24.0) +92 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.2.7.release)

org.springframework:spring-messaging MAVEN version 4.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - com.bq.corbel.lib:rabbitmq 0.11.0 - com.bq.corbel.lib:ws 0.24.0 -...

ch.rasc:wampspring (1.1.1), ch.rasc:wampspring-security (1.1.1) +144 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.1.6.release)

org.springframework:spring-messaging MAVEN version 4.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - ch.rasc:wampspring 1.1.1 - ch.rasc:wampspring-security 1.1.1 -...

com.alibaba.cloud:spring-cloud-starter-bus-rocketmq (1.5.0.release), com.alibaba.cloud:spring-cloud-starter-stream-rocketmq (1.5.0.release) +87 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.19.release)

org.springframework:spring-messaging MAVEN version 4.3.19.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - com.alibaba.cloud:spring-cloud-starter-bus-rocketmq 1.5.0.release -...

cn.shazhengbo:code-generator (>=1.0.0, <=1.0.1), com.ibm.mq:mq-jms-spring-boot-starter (>=0.0.2, <=0.0.4) +577 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.12.release)

org.springframework:spring-messaging MAVEN version 4.3.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - cn.shazhengbo:code-generator =1.0.0, =0.0.2, =3.0.0, =3.0.0, =1.2.4-release,...

de.mhus.app.vault:vault-playground-assembly (>=7.2.0, <=7.3.0), de.mhus.cherry.vault:vault-playground-assembly (7.1.0) +45 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.26.release)

org.springframework:spring-messaging MAVEN version 4.3.26.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - de.mhus.app.vault:vault-playground-assembly =7.2.0, =7.1.0, =7.1.0, =7.1.0,...

com.fnproject.fn:fn-spring-cloud-function (>=1.0.70, <=1.0.109), com.gitee.qdbp:qdbp-general-ctl (>=3.3.0, <=3.4.2) +324 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.17.release)

org.springframework:spring-messaging MAVEN version 4.3.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - com.fnproject.fn:fn-spring-cloud-function =1.0.70, =3.3.0, =3.3.10, =3.3.10,...

cn.springcloud.gray:spring-cloud-gray-plugin-event-stream (>=a.1.1.1, <=a.2.0.0), cn.springcloud.gray:spring-cloud-gray-server-plugin-event-stream (>=a.1.1.1, <=a.2.0.0) +97 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.25.release)

org.springframework:spring-messaging MAVEN version 4.3.25.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - cn.springcloud.gray:spring-cloud-gray-plugin-event-stream =a.1.1.1, =a.1.1.1,...

org.apache.activemq:activemq-camel (5.15.14), org.apache.activemq:activemq-http (5.15.14) +5 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.29.release)

org.springframework:spring-messaging MAVEN version 4.3.29.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - org.apache.activemq:activemq-camel 5.15.14 - org.apache.activemq:activemq-http...

com.bluelock:camel-spring-amqp (1.7.0), com.javaetmoi.core:spring-batch-toolkit (>=0.3.0-m1, <=1.0.1) +43 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.1.3.release)

org.springframework:spring-messaging MAVEN version 4.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - com.bluelock:camel-spring-amqp 1.7.0 - com.javaetmoi.core:spring-batch-toolkit...