io.undertow:undertow-http2-test-suite (1.2.3.final), io.undertow:undertow-servlet (1.2.3.final) +2 more potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.2.3.final)

io.undertow:undertow-core MAVEN version 1.2.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.3.final - io.undertow:undertow-servlet 1.2.3.final -...

ch.digitalfondue.stampo:stampo (1.0), ch.digitalfondue.stampo:stampo-maven-plugin (1.0) +37 more potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.2.4.final)

io.undertow:undertow-core MAVEN version 1.2.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - ch.digitalfondue.stampo:stampo 1.0 - ch.digitalfondue.stampo:stampo-maven-plugin 1.0 -...

CVE-2024-21550

SteVe is an open platform that implements different version of the OCPP protocol for Electric Vehicle charge points, acting as a central server for management of registered charge points. Attackers can inject arbitrary HTML and Javascript code via WebSockets leading to persistent Cross-Site...

CVE-2024-21550

SteVe is an open platform that implements different version of the OCPP protocol for Electric Vehicle charge points, acting as a central server for management of registered charge points. Attackers can inject arbitrary HTML and Javascript code via WebSockets leading to persistent Cross-Site...

CVE-2024-21550

SteVe is an open platform that implements different version of the OCPP protocol for Electric Vehicle charge points, acting as a central server for management of registered charge points. Attackers can inject arbitrary HTML and Javascript code via WebSockets leading to persistent Cross-Site...

CVE-2024-21550

The CVE-2024-21550 entry concerns SteVe, an open platform implementing OCPP for EV charging points. Affected component: SteVe management interface accessed over WebSockets. Root cause: attackers can inject arbitrary HTML/JavaScript via WebSockets, resulting in persistent Cross‑Site Scripting. Imp...

CVE-2024-21550: Improper Neutralization of Input During Web Page Generation

SteVe is an open platform that implements different version of the OCPP protocol for Electric Vehicle charge points, acting as a central server for management of registered charge points. Attackers can inject arbitrary HTML and Javascript code via WebSockets leading to persistent Cross-Site...

PT-2024-18962 · Steve · Steve

Name of the Vulnerable Software and Affected Versions: SteVe affected versions not specified Description: SteVe is an open platform that implements different versions of the OCPP protocol for Electric Vehicle charge points, acting as a central server for management of registered charge points...

How to Enable HTML5 Connections to Provisioning Services Based Catalogs

Enabling connections from Receiver for HTML5 to desktops deployed using Provisioning Services. Background Enabling connections from Receiver for HTML5 to desktops in Provisioning Services PVS based catalogs might require additional steps to complete depending on the persistence of the write cache...

OPENSUSE-SU-2024:14166-1 python310-websockets-12.0-2.6 on GA media

These are all security issues fixed in the python310-websockets-12.0-2.6 package on the GA media of openSUSE Tumbleweed...

io.undertow:undertow-servlet (1.1.0.beta6), io.undertow:undertow-websockets-jsr (1.1.0.beta6) +1 more potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.1.0.beta6)

io.undertow:undertow-core MAVEN version 1.1.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.beta6 - io.undertow:undertow-websockets-jsr 1.1.0.beta6 -...

io.undertow:undertow-http2-test-suite (1.1.0.beta7), io.undertow:undertow-servlet (1.1.0.beta7) +3 more potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.1.0.beta7)

io.undertow:undertow-core MAVEN version 1.1.0.beta7 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.1.0.beta7 - io.undertow:undertow-servlet 1.1.0.beta7 -...

io.undertow:undertow-http2-test-suite (1.1.0.beta8), io.undertow:undertow-servlet (1.1.0.beta8) +1 more potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.1.0.beta8)

io.undertow:undertow-core MAVEN version 1.1.0.beta8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.1.0.beta8 - io.undertow:undertow-servlet 1.1.0.beta8 -...

io.undertow:undertow-servlet (1.1.0.cr2), io.undertow:undertow-websockets-jsr (1.1.0.cr2) potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.1.0.cr2)

io.undertow:undertow-core MAVEN version 1.1.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.cr2 - io.undertow:undertow-websockets-jsr 1.1.0.cr2 Source cves:...

io.undertow:undertow-servlet (1.1.0.beta4), io.undertow:undertow-websockets-jsr (1.1.0.beta4) potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.1.0.beta4)

io.undertow:undertow-core MAVEN version 1.1.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.beta4 - io.undertow:undertow-websockets-jsr 1.1.0.beta4 Source cves:...

com.fizzed:ninja-undertow (5.7.0.undertow1), com.manywho.sdk:sdk-example (>=2.0.0-beta-01, <=2.0.0-snapshot-66) +9 more potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.3.24.final)

io.undertow:undertow-core MAVEN version 1.3.24.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.fizzed:ninja-undertow 5.7.0.undertow1 - com.manywho.sdk:sdk-example =2.0.0-beta-01, =2.0.0-beta-01...

io.undertow:undertow-servlet (1.3.26.final), io.undertow:undertow-websockets-jsr (1.3.26.final) +9 more potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.3.26.final)

io.undertow:undertow-core MAVEN version 1.3.26.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.26.final - io.undertow:undertow-websockets-jsr 1.3.26.final -...

io.undertow:undertow-servlet (1.3.29.final), io.undertow:undertow-websockets-jsr (1.3.29.final) potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.3.29.final)

io.undertow:undertow-core MAVEN version 1.3.29.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.29.final - io.undertow:undertow-websockets-jsr 1.3.29.final Source...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

io.undertow:undertow-servlet (1.4.0.beta1), io.undertow:undertow-websockets-jsr (1.4.0.beta1) potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.4.0.beta1)

io.undertow:undertow-core MAVEN version 1.4.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.0.beta1 - io.undertow:undertow-websockets-jsr 1.4.0.beta1 Source cves:...