Skip to content
OpenAdvisories

Product · Spring

Spring AMQP

8 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.0
    CVE-2023-34050 Public exploit

    Spring AMQP Deserialization Vulnerability

    In spring AMQP versions 1.0.0 to 2.4.16 and 3.0.0 to 3.0.9 , allowed list patterns for deserializable class names were added to Spring AMQP, allowing users to lock down deserialization of data in messages from untrusted sources; however by default, when no al…