Improper Input Validation in Spring AMQP

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2016-2173 · ADVISORY
• bugzilla.redhat.com/show_bug.cgi · WEB
• pivotal.io/security/cve-2016-2173 · WEB
• lists.fedoraproject.org/pipermail/package-announce/2016-April/182551.html · WEB
• lists.fedoraproject.org/pipermail/package-announce/2016-April/182850.html · WEB
• lists.fedoraproject.org/pipermail/package-announce/2016-April/182959.html · WEB

org.springframework.amqp:spring-amqp のその他の脆弱性

• CVE-2026-41714中 4.0Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri("amqps://...") without also calling setUseSSL(tru…
• CVE-2026-41701中 4.4Correlation IDs for replies in the RabbitTemplate.sendAndReceive() with the fixed reply queue are predictable due to internal simple counter…
• CVE-2021-22095中 6.5In Spring AMQP versions 2.2.0 - 2.2.19 and 2.3.0 - 2.3.11, the Spring AMQP Message object, in its toString() method, will create a new Strin…
• CVE-2021-22097中 6.5In Spring AMQP versions 2.2.0 - 2.2.18 and 2.3.0 - 2.3.10, the Spring AMQP Message object, in its toString() method, will deserialize a body…
• CVE-2018-11087中 5.9Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of h…