CVE-2023-26114

Versions of the package code-server before 4.10.1 are vulnerable to Missing Origin Validation in WebSockets handshakes. Exploiting this vulnerability can allow an adversary in specific scenarios to access data from and connect to the code-server instance...

PT-2023-20500 · Unknown · Code-Server

Name of the Vulnerable Software and Affected Versions: code-server versions prior to 4.10.1 Description: The issue is related to Missing Origin Validation in WebSockets handshakes. This can allow an adversary in specific scenarios to access data from and connect to the code-server instance...

CVE-2023-26114: Missing Origin Validation in WebSockets

Versions of the package code-server before 4.10.1 are vulnerable to Missing Origin Validation in WebSockets handshakes. Exploiting this vulnerability can allow an adversary in specific scenarios to access data from and connect to the code-server instance...

io.undertow:undertow-servlet (1.0.0.alpha2), io.undertow:undertow-websockets-jsr (1.0.0.alpha2) potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.0.alpha2)

io.undertow:undertow-core MAVEN version 1.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha2 - io.undertow:undertow-websockets-jsr 1.0.0.alpha2 Source...

io.undertow:undertow-servlet (1.0.0.alpha3), io.undertow:undertow-websockets-jsr (1.0.0.alpha3) potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.0.alpha3)

io.undertow:undertow-core MAVEN version 1.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha3 - io.undertow:undertow-websockets-jsr 1.0.0.alpha3 Source...

io.undertow:undertow-servlet (1.0.0.alpha4), io.undertow:undertow-websockets-jsr (1.0.0.alpha4) potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.0.alpha4)

io.undertow:undertow-core MAVEN version 1.0.0.alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha4 - io.undertow:undertow-websockets-jsr 1.0.0.alpha4 Source...

io.undertow:undertow-servlet (1.0.0.alpha5), io.undertow:undertow-websockets-jsr (1.0.0.alpha5) potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.0.alpha5)

io.undertow:undertow-core MAVEN version 1.0.0.alpha5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha5 - io.undertow:undertow-websockets-jsr 1.0.0.alpha5 Source...

io.undertow:undertow-servlet (1.0.0.alpha6), io.undertow:undertow-websockets-jsr (1.0.0.alpha6) potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.0.alpha6)

io.undertow:undertow-core MAVEN version 1.0.0.alpha6 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha6 - io.undertow:undertow-websockets-jsr 1.0.0.alpha6 Source...

io.undertow:undertow-servlet (1.0.0.alpha7), io.undertow:undertow-websockets-jsr (1.0.0.alpha7) potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.0.alpha7)

io.undertow:undertow-core MAVEN version 1.0.0.alpha7 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha7 - io.undertow:undertow-websockets-jsr 1.0.0.alpha7 Source...

io.undertow:undertow-servlet (1.0.0.alpha8), io.undertow:undertow-websockets-jsr (1.0.0.alpha8) potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.0.alpha8)

io.undertow:undertow-core MAVEN version 1.0.0.alpha8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha8 - io.undertow:undertow-websockets-jsr 1.0.0.alpha8 Source...

io.undertow:undertow-servlet (1.0.0.alpha9), io.undertow:undertow-websockets-jsr (1.0.0.alpha9) potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.0.alpha9)

io.undertow:undertow-core MAVEN version 1.0.0.alpha9 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha9 - io.undertow:undertow-websockets-jsr 1.0.0.alpha9 Source...

io.undertow:undertow-servlet (1.0.0.alpha10), io.undertow:undertow-websockets-jsr (1.0.0.alpha10) potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.0.alpha10)

io.undertow:undertow-core MAVEN version 1.0.0.alpha10 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha10 - io.undertow:undertow-websockets-jsr 1.0.0.alpha10 Source...

io.undertow:undertow-servlet (1.0.0.alpha11), io.undertow:undertow-websockets-jsr (1.0.0.alpha11) potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.0.alpha11)

io.undertow:undertow-core MAVEN version 1.0.0.alpha11 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha11 - io.undertow:undertow-websockets-jsr 1.0.0.alpha11 Source...

io.undertow:undertow-servlet (1.0.0.alpha12), io.undertow:undertow-websockets-jsr (1.0.0.alpha12) potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.0.alpha12)

io.undertow:undertow-core MAVEN version 1.0.0.alpha12 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha12 - io.undertow:undertow-websockets-jsr 1.0.0.alpha12 Source...

io.undertow:undertow-servlet (1.0.0.alpha13), io.undertow:undertow-websockets-jsr (1.0.0.alpha13) potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.0.alpha13)

io.undertow:undertow-core MAVEN version 1.0.0.alpha13 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha13 - io.undertow:undertow-websockets-jsr 1.0.0.alpha13 Source...

io.undertow:undertow-servlet (1.0.0.alpha14), io.undertow:undertow-websockets-jsr (1.0.0.alpha14) potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.0.alpha14)

io.undertow:undertow-core MAVEN version 1.0.0.alpha14 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha14 - io.undertow:undertow-websockets-jsr 1.0.0.alpha14 Source...

io.undertow:undertow-servlet (1.0.0.alpha16), io.undertow:undertow-websockets-jsr (1.0.0.alpha16) potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.0.alpha16)

io.undertow:undertow-core MAVEN version 1.0.0.alpha16 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha16 - io.undertow:undertow-websockets-jsr 1.0.0.alpha16 Source...

io.undertow:undertow-servlet (1.0.0.alpha17), io.undertow:undertow-websockets-jsr (1.0.0.alpha17) potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.0.alpha17)

io.undertow:undertow-core MAVEN version 1.0.0.alpha17 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha17 - io.undertow:undertow-websockets-jsr 1.0.0.alpha17 Source...

io.undertow:undertow-servlet (1.0.0.alpha18), io.undertow:undertow-websockets-jsr (1.0.0.alpha18) potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.0.alpha18)

io.undertow:undertow-core MAVEN version 1.0.0.alpha18 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha18 - io.undertow:undertow-websockets-jsr 1.0.0.alpha18 Source...

io.undertow:undertow-servlet (1.0.0.alpha19), io.undertow:undertow-websockets-jsr (1.0.0.alpha19) potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.0.alpha19)

io.undertow:undertow-core MAVEN version 1.0.0.alpha19 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha19 - io.undertow:undertow-websockets-jsr 1.0.0.alpha19 Source...