Improper Input Validation in Spring AMQP

Description

References

• nvd.nist.gov/vuln/detail/CVE-2016-2173 · ADVISORY
• bugzilla.redhat.com/show_bug.cgi · WEB
• pivotal.io/security/cve-2016-2173 · WEB
• lists.fedoraproject.org/pipermail/package-announce/2016-April/182551.html · WEB
• lists.fedoraproject.org/pipermail/package-announce/2016-April/182850.html · WEB
• lists.fedoraproject.org/pipermail/package-announce/2016-April/182959.html · WEB

Weitere Schwachstellen in org.springframework.amqp:spring-amqp

• CVE-2026-41714MITTEL 4.0Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri("amqps://...") without also calling setUseSSL(tru…
• CVE-2026-41701MITTEL 4.4Correlation IDs for replies in the RabbitTemplate.sendAndReceive() with the fixed reply queue are predictable due to internal simple counter…
• CVE-2021-22095MITTEL 6.5In Spring AMQP versions 2.2.0 - 2.2.19 and 2.3.0 - 2.3.11, the Spring AMQP Message object, in its toString() method, will create a new Strin…
• CVE-2021-22097MITTEL 6.5In Spring AMQP versions 2.2.0 - 2.2.18 and 2.3.0 - 2.3.10, the Spring AMQP Message object, in its toString() method, will deserialize a body…
• CVE-2018-11087MITTEL 5.9Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of h…