Skip to content
OpenAdvisories

Package · Hex

rabbit_common

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-51988

    HTTP API's queue deletion endpoint does not verify that the user has a required permission

    RabbitMQ is a feature rich, multi-protocol messaging and streaming broker. In affected versions queue deletion via the HTTP API was not verifying the `configure` permission of the user. Users who had all of the following: 1. Valid credentials, 2. Some permiss…

    rabbitmq rabbitmq-server rabbit_common Hex
  • Medium 4.9
    CVE-2023-46118

    Denial of Service by publishing large messages over the HTTP API

    RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish …

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server Debian Ubuntu Hex
  • Medium 5.5
    CVE-2022-31008

    Predictable credential obfuscation seed value used in rabbitmq-server

    RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This mea…

    rabbitmq rabbitmq-server rabbitmq-server rabbit_common Debian Ubuntu Hex