GHSA-945q-ch46-pchgMediumCVSS 6.5
Deserialization of Untrusted Data in Spring AMQP
🔗 CVE IDs covered (1)
📋 Description
In Spring AMQP versions 2.2.0 - 2.2.19 and 2.3.0 - 2.3.11, the Spring AMQP Message object, in its toString() method, will create a new String object from the message body, regardless of its size. This can cause an OOM Error with a large message
🎯 Affected products2
- maven/org.springframework.amqp:spring-amqp:>= 2.3.0, <= 2.3.10
- maven/org.springframework.amqp:spring-amqp:>= 2.2.0, <= 2.2.19