Executive brief
RabbitMQ Java client's Lack of Message Size Limitation leads to Remote DoS Attack
Affected products
- Maven com.rabbitmq:amqp-client
Junglewise Threat Intelligence
CVE-2023-46120: RabbitMQ Java client's Lack of Message Size Limitation leads to Remote DoS Attack
CVE-2023-46120 · Severity: low · CVSS 3.1 · Published 2023-10-24
Technologies: com.rabbitmq:amqp-client (Maven). Vendors: Maven.
Related threats
- The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.34.0, AMQ
- RabbitMQ Java client protocol violation on oversized frames
- RabbitMQ Java client insecure default TLS certificate validation
- RabbitMQ Java client denial of service via malformed AMQP frame
- RabbitMQ Java client unsafe reflection in JSON-RPC