Rabbitmq Consumer

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-24448 Jan 26, 21:18 Maven MEDIUM This Month

A missing permission check in Jenkins RabbitMQ Consumer Plugin 2.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified AMQP(S) URL using attacker-specified. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Jenkins Rabbitmq Consumer

NVD

CVSS 3.1

6.5

EPSS

0.7%

CVE-2023-24447 Jan 26, 21:18 Maven HIGH This Week

A cross-site request forgery (CSRF) vulnerability in Jenkins RabbitMQ Consumer Plugin 2.8 and earlier allows attackers to connect to an attacker-specified AMQP(S) URL using attacker-specified. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Jenkins Rabbitmq Consumer

NVD

CVSS 3.1

8.8

EPSS

0.5%

CVE-2023-24448 Maven

EPSS 1% CVSS 6.5

MEDIUM This Month

Authentication Bypass Jenkins Rabbitmq Consumer

NVD

CVE-2023-24447 Maven

EPSS 1% CVSS 8.8

HIGH This Week

CSRF Jenkins Rabbitmq Consumer

NVD