com.azavea.geotrellis:geotrellis-jetty_2.10 (>=0.9.0-rc1, <=0.10.0-m1), com.azavea.geotrellis:geotrellis-jetty_2.11 (0.10.0-m1) +56 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (8.1.0.rc4)

org.eclipse.jetty:jetty-http MAVEN version 8.1.0.rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - com.azavea.geotrellis:geotrellis-jetty2.10 =0.9.0-rc1, =0.8.0-rc2, =1.5.ga, =1.8.ga -...

com.googlecode.mycontainer:maven-mycontainer-plugin (>=1.2.29, <=1.2.51), com.googlecode.mycontainer:mycontainer-gae-web (>=1.2.29, <=1.2.51) +58 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.4.0.v20110414)

org.eclipse.jetty:jetty-http MAVEN version 7.4.0.v20110414 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - com.googlecode.mycontainer:maven-mycontainer-plugin =1.2.29, =1.2.29, =1.2.29, =1.2.29,...

org.cometd.java:cometd-java-client (2.4.0.rc3), org.cometd.java:cometd-java-examples (2.4.0.rc3) +59 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.6.0.rc5)

org.eclipse.jetty:jetty-http MAVEN version 7.6.0.rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.cometd.java:cometd-java-client 2.4.0.rc3 - org.cometd.java:cometd-java-examples 2.4.0.rc3 -...

org.cometd.java:cometd-examples-java (1.0.beta10), org.cometd.java:cometd-java-client (1.0.beta10) +34 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.0.0.m4)

org.eclipse.jetty:jetty-http MAVEN version 7.0.0.m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.cometd.java:cometd-examples-java 1.0.beta10 - org.cometd.java:cometd-java-client 1.0.beta10 -...

org.cometd.java:cometd-examples-java (1.1.2), org.cometd.java:cometd-java-client (>=1.1.2, <=2.0.0) +51 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.1.5.v20100705)

org.eclipse.jetty:jetty-http MAVEN version 7.1.5.v20100705 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.cometd.java:cometd-examples-java 1.1.2 - org.cometd.java:cometd-java-client =1.1.2, =1.1....

CVE-2022-24721

A flaw was found in CometD’s Oort package. This flaw allows an attacker to monitor unauthorized channels when connected remotely...

Improper Authorization

org.cometd.java:cometd-java-oort is vulnerable to improper authorization. Remote attackers are able to subscribe and publish to Oort and Seti channels due to improper authorization, allowing interception of internal cluster traffic. As a result the remote attackers are able to create/modify/delet...

org.cometd:cometd-demo (2.1.0.rc) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (2.1.0.rc)

org.cometd.java:cometd-java-oort MAVEN version 2.1.0.rc is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 2.1.0.rc Source cves: CVE-2022-24721 Source advisory:...

org.cometd:cometd-demo (3.0.4) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (3.0.4)

org.cometd.java:cometd-java-oort MAVEN version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 3.0.4 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (3.1.12) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (3.1.12)

org.cometd.java:cometd-java-oort MAVEN version 3.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 3.1.12 Source cves: CVE-2022-24721 Source advisory:...

org.cometd:cometd-demo (2.4.0.rc3) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (2.4.0.rc3)

org.cometd.java:cometd-java-oort MAVEN version 2.4.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 2.4.0.rc3 Source cves: CVE-2022-24721 Source advisory:...

org.cometd:cometd-demo (2.0.beta0) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (2.0.beta0)

org.cometd.java:cometd-java-oort MAVEN version 2.0.beta0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 2.0.beta0 Source cves: CVE-2022-24721 Source advisory:...

org.cometd:cometd-demo (3.0.9) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (3.0.9)

org.cometd.java:cometd-java-oort MAVEN version 3.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 3.0.9 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (2.0.0) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (2.0.0)

org.cometd.java:cometd-java-oort MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 2.0.0 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (2.2.0.rc0) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (2.2.0.rc0)

org.cometd.java:cometd-java-oort MAVEN version 2.2.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 2.2.0.rc0 Source cves: CVE-2022-24721 Source advisory:...

org.cometd:cometd-demo (2.7.0) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (2.7.0)

org.cometd.java:cometd-java-oort MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 2.7.0 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (2.1.1) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (2.1.1)

org.cometd.java:cometd-java-oort MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 2.1.1 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (4.0.7) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (4.0.7)

org.cometd.java:cometd-java-oort MAVEN version 4.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 4.0.7 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (2.5.0-beta3) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (2.5.0-beta3)

org.cometd.java:cometd-java-oort MAVEN version 2.5.0-beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 2.5.0-beta3 Source cves: CVE-2022-24721 Source advisory:...

org.cometd:cometd-demo (3.1.1) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (3.1.1)

org.cometd.java:cometd-java-oort MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 3.1.1 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...