CVE-2018-11087

CVE-2018-11087 affects Pivotal Spring AMQP and RabbitMQ amqp-client. The issue arises from improper hostname validation, enabling a man-in-the-middle attacker to intercept traffic and view data in transit. Documented impact includes information disclosure due to lack of hostname verification. IBM...

CVE-2017-8045

CVE-2017-8045 is a deserialization vulnerability in Pivotal Spring AMQP. The issue affects versions prior to 1.7.4, 1.6.11, and 1.5.7 where an org.springframework.amqp.core.Message can be unsafely deserialized when converted to a string, enabling remote code execution. Public sources (OSV and CVE...