VendorsJenkinsrabbitmq_consumerall versions
Vulnerabilities

Jenkins RabbitMQ Consumer

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

2CVEs
CVE-2023-24447
A cross-site request forgery (CSRF) vulnerability in Jenkins RabbitMQ Consumer Plugin 2.8 and earlier allows attackers to connect to an attacker-specified AMQP(S) URL using attacker-specified username and password.
Published 2023-01-24 · Modified
8.8EPSS 0.005
CVE-2023-24448
A missing permission check in Jenkins RabbitMQ Consumer Plugin 2.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified AMQP(S) URL using attacker-specified username and password.
Published 2023-01-24 · Modified
6.5EPSS 0.007