CyberICT

CVE-2026-43969

Microsoft · Published May 15, 2026

CVSS v3.1

INFO
Patch availableGet patch

Description

Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1. Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1

Affected Products

  • azl3 rabbitmq-server 3.13.7-3 on Azure Linux 3.0
  • azl3 rabbitmq-server 3.13.7-5 on Azure Linux 3.0
  • azl3 rabbitmq-server 3.13.7-6 on Azure Linux 3.0
  • azl3 rabbitmq-server 3.13.7-8 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N