tocsin

Debian/rabbitmq-server: unknown

CRLF injection vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks

Action: Upgrade rabbitmq-server to 3.4.1-1 or later.

Affected

introducedfixedlast affected
03.4.1-1-

Fixed versions

3.4.1-1

Sources

published · modified · JSON