CyberRota Analysis
AI-GeneratedThe RabbitMQ messaging and streaming broker is vulnerable to a flaw in the rabbitmq_management HTTP API that allows oversized valid JSON bodies to be accepted, potentially leading to denial of service or resource exhaustion. This issue affects versions prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, and organizations using these versions should prioritize upgrading to mitigate the risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbitmq_management HTTP API accepts oversized valid JSON bodies on with_decode and direct_request paths because read_complete_body checks the accumulated size before the final chunk but not the final combined size. This issue is fixed in versions 3.13.14, 4.0.19, 4.1.10, and 4.2.5.
Related CVEs
Other vulnerabilities affecting the same vendor(s)