Cross-site Scripting (XSS)

rabbitmq-server is vulnerable to Cross-site Scripting XSS attacks. The vulnerability exists due to improper sanitization which allows a remote authenticated malicious user with administrative access to inject and execute arbitrary javascript...

Ubuntu: Security Advisory (USN-6265-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6265-1 rabbitmq-server vulnerability

It was discovered that RabbitMQ incorrectly handled certain signed-in user credentials. An attacker could possibly use this issue to expose sensitive information...

USN-6265-1: RabbitMQ vulnerability

It was discovered that RabbitMQ incorrectly handled certain signed-in user credentials. An attacker could possibly use this issue to expose sensitive information...

Ubuntu 16.04 ESM : RabbitMQ vulnerability (USN-6265-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-6265-1 advisory. It was discovered that RabbitMQ incorrectly handled certain signed-in user credentials. An attacker could possibly use this issue to expose sensitive information...

Remote Code Execution (RCE)

org.apache.eventmesh:eventmesh-connector-rabbitmq is vulnerable to Remote Code Execution RCE. The vulnerability is due to blindly reading a ByteArrayInputStream without sanitization in getFromByteArray, which allows an attacker to execute malicious code on the system via rabbitmq messages...

GHSA-FJ8F-56WC-Q36R rabbitmq-connector plugin module in Apache EventMesh platforms allows attackers to send controlled message

CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh incubating V1.7.0\V1.8.0 on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via rabbitmq messages. Users can use the code under the master...

rabbitmq-connector plugin module in Apache EventMesh platforms allows attackers to send controlled message

CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh incubating V1.7.0\V1.8.0 on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via rabbitmq messages. Users can use the code under the master...

CVE-2023-26512

CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh incubating V1.7.0\V1.8.0 on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via rabbitmq messages. Users can use the code under the master...

CVE-2023-26512

CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh incubating V1.7.0\V1.8.0 on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via rabbitmq messages. Users can use the code under the master...

Deserialization of untrusted data

CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh incubating V1.7.0\V1.8.0 on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via rabbitmq messages. Users can use the code under the master...

CVE-2023-26512 Apache EventMesh RabbitMQ-Connector plugin allows RCE through deserialization of untrusted data

CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh incubating V1.7.0\V1.8.0 on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via rabbitmq messages. Users can use the code under the master...

CVE-2023-26512

CVE-2023-26512 affects Apache EventMesh, specifically the rabbitmq-connector plugin . The issue is a CWE-502 deserialization of untrusted data in versions V1.7.0–V1.8.0 , on Windows, Linux, and macOS, allowing an attacker to send crafted RabbitMQ messages that may lead to remote code execution. T...

CVE-2023-26512 Apache EventMesh RabbitMQ-Connector plugin allows RCE through deserialization of untrusted data

CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh incubating V1.7.0\V1.8.0 on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via rabbitmq messages. Users can use the code under the master...

Apache EventMesh 代码问题漏洞

Apache EventMesh is a new generation of serverless event middleware from the Apache Foundation for building distributed event-driven applications. A code issue vulnerability exists in Apache EventMesh incubating versions V1.7.0 to V1.8.0, which stems from a deserialization vulnerability in the...

PT-2023-5217 · Apache · Apache Eventmesh

Name of the Vulnerable Software and Affected Versions: Apache EventMesh incubating versions 1.7.0 through 1.8.0 Description: The issue is related to the deserialization of untrusted data in the rabbitmq-connector plugin module, allowing attackers to send controlled messages and execute remote cod...

SUSE-SU-2023:2823-1 Security update for rabbitmq-c

This update for rabbitmq-c fixes the following issues: - CVE-2023-35789: Fixed insecure credentials submission bsc1212499...

Security Bulletin: RabbitMQ as used by IBM QRadar SIEM is vulnerable to potential man-in-the-middle attack (CVE-2018-11087)

Summary RabbitMQ as used by IBM QRadar SIEM is vulnerable to potential man-in-the-middle attack. IBM QRadar SIEM has addressed the applicable vulnerability. Vulnerability Details CVEID:CVE-2018-11087 DESCRIPTION: Pivotal Spring-AMQP and RabbitMQ amqp-client are vulnerable to a man-in-the-middle...

SUSE CVE-2023-35789

An issue was discovered in the C AMQP client library aka rabbitmq-c through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line e.g., for amqp-publish or amqp-consume and are thus visible to local attackers by listing a process and its arguments...

ALPINE-CVE-2023-35789

An issue was discovered in the C AMQP client library aka rabbitmq-c through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line e.g., for amqp-publish or amqp-consume and are thus visible to local attackers by listing a process and its arguments...