CVE-2022-31008

CVE-2022-31008 is a high-severity vulnerability affecting RabbitMQ versions prior to 3.10.2, 3.9.18, and 3.8.32, specifically impacting the shovel and federation plugins. The vulnerability stems from the use of a predictable secret to encrypt sensitive URI data, which could lead to its deobfuscation and exposure in node logs under specific exception conditions. With a CVSS score of 7.5, this network-exploitable flaw could result in high confidentiality impact without requiring user interaction or complex attack methods. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.