io.undertow:undertow-servlet (1.3.32.final), io.undertow:undertow-websockets-jsr (1.3.32.final) potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.3.32.final)

io.undertow:undertow-core MAVEN version 1.3.32.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.32.final - io.undertow:undertow-websockets-jsr 1.3.32.final Source...

io.undertow:undertow-servlet (1.3.33.final), io.undertow:undertow-websockets-jsr (1.3.33.final) +10 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.3.33.final)

io.undertow:undertow-core MAVEN version 1.3.33.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.33.final - io.undertow:undertow-websockets-jsr 1.3.33.final -...

io.undertow:undertow-servlet (1.4.0.beta1), io.undertow:undertow-websockets-jsr (1.4.0.beta1) potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.4.0.beta1)

io.undertow:undertow-core MAVEN version 1.4.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.0.beta1 - io.undertow:undertow-websockets-jsr 1.4.0.beta1 Source cves:...

io.undertow:undertow-servlet (1.4.1.final), io.undertow:undertow-websockets-jsr (1.4.1.final) potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.4.1.final)

io.undertow:undertow-core MAVEN version 1.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.1.final - io.undertow:undertow-websockets-jsr 1.4.1.final Source cves:...

io.undertow:undertow-servlet (1.4.2.final), io.undertow:undertow-websockets-jsr (1.4.2.final) +2 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.4.2.final)

io.undertow:undertow-core MAVEN version 1.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.2.final - io.undertow:undertow-websockets-jsr 1.4.2.final -...

io.undertow:undertow-servlet (1.4.5.final), io.undertow:undertow-websockets-jsr (1.4.5.final) potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.4.5.final)

io.undertow:undertow-core MAVEN version 1.4.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.5.final - io.undertow:undertow-websockets-jsr 1.4.5.final Source cves:...

com.clianz:spur-framework (0.0.3), com.zarbosoft:cogettus (0.0.2) +21 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.4.7.final)

io.undertow:undertow-core MAVEN version 1.4.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.clianz:spur-framework 0.0.3 - com.zarbosoft:cogettus 0.0.2 - com.zarbosoft:gettus 0.0.2 -...

io.undertow:undertow-servlet (1.4.9.final), io.undertow:undertow-websockets-jsr (1.4.9.final) +1 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.4.9.final)

io.undertow:undertow-core MAVEN version 1.4.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.9.final - io.undertow:undertow-websockets-jsr 1.4.9.final -...

com.datathings:greycat-websocket (9), io.undertow:undertow-servlet (1.4.17.final) +1 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.4.17.final)

io.undertow:undertow-core MAVEN version 1.4.17.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.datathings:greycat-websocket 9 - io.undertow:undertow-servlet 1.4.17.final -...

io.apiman:apiman-gateway-platforms-undertow (>=1.1.0.rc3, <=1.2.1.final), io.undertow.jastow:jastow (>=1.0.1.final, <=1.0.3.final) +3 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.0.1.final)

io.undertow:undertow-core MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.apiman:apiman-gateway-platforms-undertow =1.1.0.rc3, =1.0.1.final, =3.0.7.final, =3.0.12.final Sourc...

com.groupon.mesos:jesos (>=1.0, <=1.4), com.hubspot:embedsingularityexample (>=0.4.1, <=0.4.4) +5 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.0.16.final)

io.undertow:undertow-core MAVEN version 1.0.16.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.groupon.mesos:jesos =1.0, =0.4.1, =0.4.1, =5.2.2, =1.2.2, =2.2.2 Source cves: CVE-2023-1108 Source...

Fedora: Security Advisory for python-aiohttp (FEDORA-2023-f75af676f2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WS-2023-0260

In the settings of a Mozilla Hub, an admin user can disable the creation an object or move deny to move any object. This is bypassable with the usage of certain / inside the chat feature. An attacker does not to be authenticated nor have joined the room to perform this attack. With some JavaScrip...

CVE-2023-3615

Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection allowing a network attacker to intercept the WebSockets connection...

CVE-2023-3615

Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection allowing a network attacker to intercept the WebSockets connection...

Code injection

Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection allowing a network attacker to intercept the WebSockets connection...

CVE-2023-3615 Lack of server certificate validation in websockets connection

Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection allowing a network attacker to intercept the WebSockets connection...

CVE-2023-3615 Lack of server certificate validation in websockets connection

Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection allowing a network attacker to intercept the WebSockets connection...

CVE-2023-3615

CVE-2023-3615 affects the Mattermost iOS app, where the app fails to properly validate the server certificate during TLS initialization, allowing a network attacker to intercept WebSockets connections. The connected sources confirm the issue but do not provide concrete vulnerable versions, affect...

PT-2023-25456 · Mattermost · Mattermost Ios App

Name of the Vulnerable Software and Affected Versions: Mattermost iOS app affected versions not specified Description: The Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection, allowing a network attacker to intercept the WebSockets connection...