p PatchFirst

PatchFirst · Свежие уязвимости

Базы данных: уязвимости стека · Страница 5

За последние 30 дней в Базы данных опубликовано уязвимостей: 109; в каталоге KEV: 0.

RSS ↗ JSON ↗
Фильтры уязвимостей
Базы данных

Уязвимостей: 1413

  1. CVE-2026-67416

    Средний · CVSS 5.3EPSS 0,62%Есть исправление

    RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation

    RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, the optimized AMQP 1.0 server_mode parser in deps/amqp10_common/src/amqp10_binary_parser.erl matches the textual prefixes of symbolic data, sequence, and value body descriptors without verifying their encoded symbol lengths. An authenticated AMQP 1.0 publisher with write permission can submit a well-formed unknown descriptor that begins with a registered body descriptor, and RabbitMQ misclassifies and stores the bytes as a standard body section. Strict AMQP 1.0 consumers can terminate while decoding the stored entry. For bodies misclassified as d

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  2. CVE-2026-67420

    Низкий · CVSS 2.3EPSS 0,27%Есть исправление

    RabbitMQ OAuth credential refresh retains revoked runtime tags

    RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ OAuth credential refresh retains revoked runtime tags. when an existing AMQP connection refreshes from an OAuth token that grants the impersonator tag to a valid same-username token that no longer grants that tag, RabbitMQ updates the OAuth backend implementation (token/scopes/expiry) but leaves the connection's runtime #user.tags unchanged. rabbitaccesscontrol:checkuserid/2 then still honors the stale impersonator tag, so the connection (including newly opened channels) can continue publishing messages with a foreign AMQP user

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  3. CVE-2026-67419

    Высокий · CVSS 7.1EPSS 0,37%Есть исправление

    RabbitMQ: Consecutive topic wildcards cause combinatorial routing work

    RabbitMQ is a messaging and streaming broker. Prior to 4.3.5, an authenticated user who can bind a queue to a topic exchange and publish to it can use consecutive # segments in a binding key to make both topic matchers revisit the same trie-node and routing-key-suffix states without memoization. The matcher materializes duplicate destinations before deduplication, causing combinatorial CPU work and memory pressure that can disrupt routing for all tenants. This vulnerability is fixed in 4.3.5.

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  4. CVE-2026-67421

    Средний · CVSS 4.5EPSS 0,28%Есть исправление

    RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling

    RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP authorization-error reason containing an attacker-controlled queue name as HTML when the OAuth management UI was enabled. Exploitation requires an attacker with queue configure permission, a management administrator who can see but cannot read that queue, and the administrator clicking Get Message(s). A queue name containing a base element can then retarget the automatic relative refresh because the Content Security Policy omits base-uri and connect-src, and an attacker endpoint that permits the mana

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  5. CVE-2026-67408

    Высокий · CVSS 7.1EPSS 0,45%Есть исправление

    RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service

    RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service. rabbitMQ 4.3.1 with rabbitmqstreammanagement enabled accepts PUT /api/stream/super-streams/{vhost}/{name} requests from an authenticated management user that can access the target vhost. When the request body contains the binding-keys field, the handler parses the attacker-controlled comma-separated string and builds the full stream-name list before checking whether the user has permission to configure the resulting streams. A low-privileged management user

    rabbitmq rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  6. CVE-2026-67406

    Средний · CVSS 4.6EPSS 0,34%Есть исправление

    RabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_status

    RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, Shovel does not format state logged by the crash reporter and can leave unencrypted credentials in a crash dump file. the shovel worker genserver processes does not implement the formatstatus/2 callback. When these processes crash (e.g., due to network partitions, connection failures), the OTP SASL error handler writes the full process state , including plaintext AMQP passwords and URIs , to the error log. This is particularly severe for the shovel worker, which stores deobfuscated plaintext URIs (including amqp://user:password@host format) in its

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  7. CVE-2026-67410

    Высокий · CVSS 8.2EPSS 0,41%Есть исправление

    RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint

    RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 and 4.2.9, OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint (CWE-200). when OAuth2 authentication is enabled for the RabbitMQ Management UI and the configured flow, IDP use a client secret, the oauthclientsecret configuration value is included in the JavaScript served by the unauthenticated endpoint /js/oidc-oauth/bootstrap.js. Any user who can reach the management UI port can retrieve the OAuth2 client secret without Files: deps/rabbitmqmanagement/src/rabbitmgmtwmauth.erl, line 186 deps/rabbitmqmanagement/src/rabbitmgmtoauthbootstrap.erl, lines 35-50 dep

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  8. CVE-2026-67227

    Средний · CVSS 5.9EPSS 0,38%Есть исправление

    RabbitMQ: Atom exhaustion: to_atom on global-parameter :name

    RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.22 and 4.1.14 and 4.2.7 and 4.3.1, Atom exhaustion: toatom on global-parameter :name. resourceexists/2 (and the PUT/DELETE handlers) call rabbitdatacoercion:toatom/1 on the :name URL path segment. toatom/1 uses binarytoatom/2 (unsafe). The endpoint requires policymaker (not management, but below A user with the policymaker tag can crash the node by exhausting the atom table via repeated requests to /api/global-parameters/:name with unique :name Management plugin enabled policymaker tag ~1M HTTP. This issue is fixed in versions 4.0.22 and 4.1.14 and 4.2.7 and 4.3.1.

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.2-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  9. CVE-2026-67407

    Средний · CVSS 5.1EPSS 0,26%Есть исправление

    RabbitMQ: Incomplete fix for CVE-2026-44838: `escape_regex_char/1` does not escape `-`, leaving room for an MQTT topic permission bypass

    RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3 and 4.2.9 and 4.1.14 and 4.0.23, Incomplete fix for CVE-2026-44838: escaperegexchar/1 does not escape -, leaving room for an MQTT topic permission bypass. the CVE-2026-44838 fix made expandtopicpermission/2 escape regex metacharacters in expanded topic-permission variables (escaperegex(V)), but escaperegexchar/1 escapes \ ^ $ . | ? + ( ) [ ] { } and omits -. When a topic permission template places {clientid} inside a [...] character class A low-privileged authenticated MQTT user controlling its clientid can broaden topic authorization (read and write) when templates embed {c

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  10. CVE-2026-67226

    Средний · CVSS 6.9EPSS 0,39%Есть исправление

    RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list

    RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.22 and 4.1.14 and 4.2.7, Admin-only atom exhaustion: PUT /api/users tags list. settags/2 maps rabbitdatacoercion:toatom/1 over the user's tags list. The 20 MB management body limit fits ~3-4M short tag strings. An administrator can crash the node in a single request by creating a user (or importing definitions) with ~1M unique tag administrator. This issue is fixed in versions 4.0.22 and 4.1.14 and 4.2.7.

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.0-2
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  11. CVE-2026-67411

    Средний · CVSS 6EPSS 0,32%Есть исправление

    RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass

    RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18, 4.0.23, 4.1.14, 4.2.9, and 4.3.3, native MQTT and MQTT over WebSocket behind a trusted PROXY Protocol frontend could lose the proxy-derived client address before the MQTT authentication path checked loopback_users, causing the frontend-to-broker address to be treated as loopback. An attacker who can reach the trusted frontend and has valid credentials for a loopback-restricted account can therefore bypass the source-address restriction; the issue does not bypass password authentication. This issue is fixed in versions 3.13.18, 4.0.23, 4.1.14, 4.2.9, and 4.3.3.

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  12. CVE-2026-67413

    Средний · CVSS 6EPSS 0,49%Есть исправление

    RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression

    RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmq_jms_topic_exchange plugin's x-jms-topic exchange accepted a client-controlled rjms_erlang_selector binding expression whose LIKE evaluator expanded percent and underscore wildcards into overlapping PCRE fragments. It executed those fragments with raw re:run/3 without match or recursion limits, allowing an authenticated tenant that can bind and publish to consume broker scheduler CPU and deny service with pathological selectors. This issue is fixed in versions 4.0.23, 4.1.14, 4.2.9, and 4.3.3.

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  13. CVE-2026-61837

    Средний · CVSS 6.3EPSS 0,3%Есть исправление

    RabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checks

    RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, AMQP 1.0 management GET /bindings exposes full binding topology to any authenticated AMQP user without resource/management permission checks. the AMQP 1.0 HTTP-over-AMQP management endpoint GET /bindings (the rabbitamqpmanagement handler) enumerates bindings between an arbitrary source exchange and destination queue/exchange in the caller's virtual host without performing any resource-level permission check. Unlike every sibling operation in the same module (which call checkresourceaccess / bindingchecks), the GET handler ignores the authenticated

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  14. CVE-2026-67415

    Средний · CVSS 5.9EPSS 0,38%Есть исправление

    RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service

    RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, the Shovel parameter parser converted attacker-controlled runtime parameter values into non-garbage-collected Erlang atoms before bounding them or checking a fixed allowlist. Exploitation requires network access to the Management HTTP API, valid credentials with both the management and policymaker tags, permission to set Shovel runtime parameters on a vhost, and the rabbitmq_shovel and rabbitmq_shovel_management plugins to be enabled. The attacker can exhaust the node-wide atom table and deny service, and malicious parameters are stored durably and reparsed when w

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  15. CVE-2026-67412

    Средний · CVSS 6EPSS 0,26%Есть исправление

    RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access

    RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9 , 4.1.14, 4.0.24, and 3.13.18, Federation upstream in RabbitMQ skips vhost authorization allowing cross-vhost message access. what the bug lets you do. A policymaker on one vhost reads and drains messages out of another vhost it has no permission on. With the default ack-mode the source messages are consumed (deleted), not copied. Why that should not 1. Federation validates the upstream URI without any vhost-access Cross-vhost message read/drain from a per-vhost policymaker, breaking vhost tenancy This issue is fixed in versions 4.3.3, 4.2.9 , 4.1.14, 4.0.24, and 3.1

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  16. CVE-2026-67409

    Высокий · CVSS 8.2EPSS 0,42%Есть исправление

    RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS

    RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9, 4.1.14, 4.0.23, and 3.13.18, JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS (CWE-252). the JWKS key fetching mechanism in uaajwt.erl does not validate the HTTP response status code when downloading signing keys from the OAuth2 provider's JWKS endpoint. Non-200 responses (including 4xx and 5xx errors) are processed identically to successful responses. When the JWKS endpoint returns an error response with a valid-JSON body that lacks a keys field, all previously cached signing keys are destroyed, causing a persistent a

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 3.12.1-1ubuntu1.7
    • Обновитесь до 3.5.7-1ubuntu0.16.04.4+esm3
    • Обновитесь до 3.6.10-1ubuntu0.5+esm1
    • Обновитесь до 3.8.3-0ubuntu0.3+esm2
    • Обновитесь до 3.9.27-0ubuntu0.6
    • Обновитесь до 4.0.5-10ubuntu5.2
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  17. CVE-2026-67242

    Средний · CVSS 6.3EPSS 0,34%Есть исправление

    RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp

    RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, OAuth2 isinteger(Exp) guard skips token-expiry checks for float exp. validatetokenexpiry/1 (lines 208-214) and expirytimestamp/1 (138-144) both guard with 'when isinteger(Exp)' and fall through to ok/never for float values. josejwt:verify validates only the signature, not exp. With float exp, no expiry validation occurs anywhere in the If the IdP emits exp as a JSON float (RFC 7519 permits fractional NumericDate), both the login-time expiry check and the mid-connection disconnect timer are silently skipped , an already-expired token is accepted, and connections ne

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  18. CVE-2026-67223

    Средний · CVSS 6.3EPSS 0,36%Есть исправление

    RabbitMQ: LDAP DN injection via unescaped substitution

    RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3 maintenance lines but contains conflicting first-fixed versions for the 3.13, 4.0, and 4.1 lines. fill/2 substitutes ${username} into user_dn_pattern without RFC 4514 DN escaping, allowing a crafted username to alter the LDAP bind DN and potentially select a different directory entry. Exploitation requires rabbitmq_auth_backend_ldap with a user_dn_pattern containing ${username}, a directory layout in which the injected suffix resolves usefully, and a password valid for the resulting DN. The advisory body identifies 3.13.15, 4.0.20, 4.1

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  19. CVE-2026-67239

    Высокий · CVSS 7.6EPSS 0,15%Есть исправление

    RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI

    RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 and 4.2.9 and 4.3.3, Stored XSS via TLS peer-certificate DN in stream-management UI (sibling of V-11). lines 102/106/110 render peercertsubject / peercertissuer with raw <%= %> and no fmtstring(). RFC4514 backslash-escaping of </> is HTML-inert and bypassable (<img ... //>). Requires non-default config: a stream TLS listener with verifypeer and an attacker-obtainable trusted cert with a malicious Same as the connection.ejs finding, against operators viewing the stream-connection detail rabbitmqstream + rabbitmqstreammanagement enabled with a TLS list

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 3.12.1-1ubuntu1.7
    • Обновитесь до 3.5.7-1ubuntu0.16.04.4+esm3
    • Обновитесь до 3.6.10-1ubuntu0.5+esm1
    • Обновитесь до 3.8.3-0ubuntu0.3+esm2
    • Обновитесь до 3.9.27-0ubuntu0.6
    • Обновитесь до 4.0.5-10ubuntu5.2
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  20. CVE-2026-67241

    Средний · CVSS 4.8EPSS 0,43%Есть исправление

    RabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission check

    RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, AMQP 1.0 management exchange.declare skips alternate-exchange permission check. pUT /exchanges/:name (lines 192-240) checks only configure on the declared exchange and passes XArgs straight to rabbitexchange:declare/7. It omits the checkreadpermitted(X) + checkwritepermitted(AE) that rabbitchannel.erl:2540-2548 enforces for the alternate-exchange argument on the AMQP 0-9-1 path. The same file already implements the analogous DLX check for queues (lines 708-719), confirming this is a missing-check bug rather than intentional A user with only configure on exchange X

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-serverОперационные системы Базы данных
    • Обновитесь до 4.3.6-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →