CVE-2014-9650

no score yetEPSS 2.6%

CRLF injection vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the download parameter to api/definitions.

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
Published: 2015-01-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

broadcom:rabbitmq_server

References

http://rhn.redhat.com/errata/RHSA-2016-0308.html
http://www.openwall.com/lists/oss-security/2015/01/21/13
http://www.rabbitmq.com/release-notes/README-3.4.1.txt
http://www.securityfocus.com/bid/76091
https://groups.google.com/forum/#%21topic/rabbitmq-users/-3Z2FyGtXhs

Check your stack JSON