CVE-2023-24447: 
Java vulnerability analysis and mitigation

A cross-site request forgery (CSRF) vulnerability was discovered in Jenkins RabbitMQ Consumer Plugin versions 2.8 and earlier. The vulnerability was identified on January 24, 2023, and assigned the identifier CVE-2023-24447. This security issue affects the form validation functionality of the RabbitMQ Consumer Plugin (Jenkins Advisory, NVD).

The vulnerability stems from the plugin's failure to require POST requests for form validation methods. Additionally, the plugin lacks proper permission checks in methods implementing form validation. The severity of this vulnerability is rated as Medium according to the CVSS scoring system (Jenkins Advisory).

This vulnerability allows attackers to connect to an attacker-specified AMQP(S) URL using attacker-specified username and password. The impact is particularly significant when combined with the associated missing permission check vulnerability (CVE-2023-24448) (Jenkins Advisory).

As of the advisory's publication date, no official fix was available for this vulnerability in the RabbitMQ Consumer Plugin. Users of the affected versions (2.8 and earlier) should monitor for updates and implement general security best practices to minimize risk (Jenkins Advisory).