CyberRota Analysis
AI-GeneratedThe RabbitMQ management plugin on Windows prior to versions 4.1.11 and 4.2.6 is vulnerable to a path traversal issue that allows URL-encoded backslashes to bypass path validation, potentially leading to outbound DNS and SMB requests to attacker-controlled UNC paths. This vulnerability poses a medium risk, particularly for organizations using multiple management extension plugins. Users of affected RabbitMQ versions should prioritize upgrading to the patched releases to mitigate the risk of unauthorized access and data exfiltration.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static can pass URL-encoded backslashes to erl_prim_loader:read_file_info before path validation when multiple management extension plugins are enabled, causing outbound DNS and SMB requests to attacker-controlled UNC paths. This issue is fixed in versions 4.1.11 and 4.2.6.
Related CVEs
Other vulnerabilities affecting the same vendor(s)