SecurityThe Hacker Newsabout 2 hours ago
RabbitMQ Flaws Leak OAuth Secrets
1 min read
Two access control flaws in RabbitMQ can leak OAuth client secrets and expose cross-tenant queue metadata. Miggo discovered the vulnerabilities, present since early 2024 in versions 3.13.0 and later. Patches are available in versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15. No active exploitation has been detected.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
