org.cometd:cometd-demo (>=7.0.0, <=7.0.5), org.cometd:cometd-documentation (>=7.0.1, <=7.0.5) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (>=7.0.0, <=7.0.5)

org.cometd.java:cometd-java-oort MAVEN version =7.0.0, =7.0.0, =7.0.1, =7.0.5 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4RJV...

org.cometd:cometd-demo (3.1.10) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (3.1.10)

org.cometd.java:cometd-java-oort MAVEN version 3.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 3.1.10 Source cves: CVE-2022-24721 Source advisory:...

org.cometd:cometd-demo (1.1.3) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (1.1.3)

org.cometd.java:cometd-java-oort MAVEN version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 1.1.3 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (2.6.0) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (2.6.0)

org.cometd.java:cometd-java-oort MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 2.6.0 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (1.1.2) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (1.1.2)

org.cometd.java:cometd-java-oort MAVEN version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 1.1.2 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (3.0.0.rc1) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (3.0.0.rc1)

org.cometd.java:cometd-java-oort MAVEN version 3.0.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 3.0.0.rc1 Source cves: CVE-2022-24721 Source advisory:...

org.cometd:cometd-demo (2.5.1) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (2.5.1)

org.cometd.java:cometd-java-oort MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 2.5.1 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (2.5.0) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (2.5.0)

org.cometd.java:cometd-java-oort MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 2.5.0 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (3.0.3) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (3.0.3)

org.cometd.java:cometd-java-oort MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 3.0.3 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (1.0.0) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (1.0.0)

org.cometd.java:cometd-java-oort MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 1.0.0 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (3.1.2) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (3.1.2)

org.cometd.java:cometd-java-oort MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 3.1.2 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (2.1.0.beta1) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (2.1.0.beta1)

org.cometd.java:cometd-java-oort MAVEN version 2.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 2.1.0.beta1 Source cves: CVE-2022-24721 Source advisory:...

org.cometd:cometd-demo (3.1.1) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (3.1.1)

org.cometd.java:cometd-java-oort MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 3.1.1 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

CVE-2022-24721

CometD is a scalable comet implementation for web messaging. In any version prior to 5.0.11, 6.0.6, and 7.0.6, internal usage of Oort and Seti channels is improperly authorized, so any remote user could subscribe and publish to those channels. By subscribing to those channels, a remote user may b...

Code injection

CometD is a scalable comet implementation for web messaging. In any version prior to 5.0.11, 6.0.6, and 7.0.6, internal usage of Oort and Seti channels is improperly authorized, so any remote user could subscribe and publish to those channels. By subscribing to those channels, a remote user may b...

org.cometd:cometd-demo (>=6.0.0, <=6.0.5), org.cometd:cometd-documentation (>=6.0.1, <=6.0.5) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (>=6.0.0, <=6.0.5)

org.cometd.java:cometd-java-oort MAVEN version =6.0.0, =6.0.0, =6.0.1, =6.0.5 Source cves: CVE-2022-24721 Source advisory: MEND:CVE-2022-24721...

CVE-2022-24721 Incorrect Authorization in org.cometd.oort

CometD is a scalable comet implementation for web messaging. In any version prior to 5.0.11, 6.0.6, and 7.0.6, internal usage of Oort and Seti channels is improperly authorized, so any remote user could subscribe and publish to those channels. By subscribing to those channels, a remote user may b...

org.cometd:cometd-demo (>=7.0.0, <=7.0.5), org.cometd:cometd-documentation (>=7.0.1, <=7.0.5) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (>=7.0.0, <=7.0.5)

org.cometd.java:cometd-java-oort MAVEN version =7.0.0, =7.0.0, =7.0.1, =7.0.5 Source cves: CVE-2022-24721 Source advisory: MEND:CVE-2022-24721...

org.cometd:cometd-demo (>=1.0.beta9, <=5.0.10), org.cometd:cometd-documentation (>=5.0.4, <=5.0.10) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (>=1.0.beta9, <=5.0.10)

org.cometd.java:cometd-java-oort MAVEN version =1.0.beta9, =1.0.beta9, =5.0.4, =5.0.10 Source cves: CVE-2022-24721 Source advisory: MEND:CVE-2022-24721...

CVE-2022-24721

CometD is a scalable comet implementation for web messaging. In any version prior to 5.0.11, 6.0.6, and 7.0.6, internal usage of Oort and Seti channels is improperly authorized, so any remote user could subscribe and publish to those channels. By subscribing to those channels, a remote user may b...