rpm package
suse/rabbitmq-server313&distro=SUSE Linux Enterprise Module for Server Applications 15 SP6
pkg:rpm/suse/rabbitmq-server313&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP6
Vulnerabilities (7)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-50200 | — | < 3.13.1-150600.13.11.1 | 3.13.1-150600.13.11.1 | Jun 19, 2025 | RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorizat | ||
| CVE-2025-30219 | Med | 6.1 | < 3.13.1-150600.13.8.1 | 3.13.1-150600.13.8.1 | Mar 25, 2025 | RabbitMQ is a messaging and streaming broker. Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable (with other on disk file modifications) can lead to arbitrary JavaScript code execution in the | |
| CVE-2023-46118 | — | < 3.13.1-150600.13.5.3 | 3.13.1-150600.13.5.3 | Oct 24, 2023 | RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages | ||
| CVE-2022-31008 | — | < 3.13.1-150600.13.5.3 | 3.13.1-150600.13.5.3 | Oct 6, 2022 | RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of ce | ||
| CVE-2021-32719 | — | < 3.13.1-150600.13.5.3 | 3.13.1-150600.13.5.3 | Jun 28, 2021 | RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was displayed in the RabbitMQ management UI via the `rabbitmq_federation_management` plugin, its consumer tag was rendered without proper tag sanitization. T | ||
| CVE-2021-32718 | — | < 3.13.1-150600.13.5.3 | 3.13.1-150600.13.5.3 | Jun 28, 2021 | RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper `` tag sanitization, potentially allowing for JavaScri | ||
| CVE-2021-22116 | — | < 3.13.1-150600.13.5.3 | 3.13.1-150600.13.5.3 | Jun 8, 2021 | RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having t |
- CVE-2025-50200Jun 19, 2025affected < 3.13.1-150600.13.11.1fixed 3.13.1-150600.13.11.1
RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorizat
- affected < 3.13.1-150600.13.8.1fixed 3.13.1-150600.13.8.1
RabbitMQ is a messaging and streaming broker. Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable (with other on disk file modifications) can lead to arbitrary JavaScript code execution in the
- CVE-2023-46118Oct 24, 2023affected < 3.13.1-150600.13.5.3fixed 3.13.1-150600.13.5.3
RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages
- CVE-2022-31008Oct 6, 2022affected < 3.13.1-150600.13.5.3fixed 3.13.1-150600.13.5.3
RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of ce
- CVE-2021-32719Jun 28, 2021affected < 3.13.1-150600.13.5.3fixed 3.13.1-150600.13.5.3
RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was displayed in the RabbitMQ management UI via the `rabbitmq_federation_management` plugin, its consumer tag was rendered without proper tag sanitization. T
- CVE-2021-32718Jun 28, 2021affected < 3.13.1-150600.13.5.3fixed 3.13.1-150600.13.5.3
RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper `` tag sanitization, potentially allowing for JavaScri
- CVE-2021-22116Jun 8, 2021affected < 3.13.1-150600.13.5.3fixed 3.13.1-150600.13.5.3
RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having t