CVE-2023-46120

CVE-2023-46120 is a denial-of-service vulnerability affecting the RabbitMQ Java client library, allowing attackers to exhaust consumer memory. This vulnerability, with a CVSS score of 7.5 (High), stems from the client's failure to utilize maxBodyLength when processing Message objects, enabling a remote attacker to trigger an Out-of-Memory error by sending an excessively large message. While no public exploit code or active exploitation has been observed, and community discussion is minimal, organizations using affected versions should prioritize patching to version 5.18.0 or later to mitigate this risk.