ECNEPSNAI web code issues and vulnerabilities

Web is a Golang HTTP server by Ian Spence, a personal developer. It is used for complex web applications. A security vulnerability exists in ecnepsnai web, which stems from Web Sockets not executing any AuthenticateMethod method that may be set to cause the nil pointer to be dereferenced if the...

httpd: mod_lua: Information disclosure with websockets

A flaw was found in the modlua module of httpd. The data returned by the wsread function may point past the end of the storage allocated for the buffer, resulting in information disclosure...

httpd: mod_lua: Information disclosure with websockets

A flaw was found in the modlua module of httpd. The data returned by the wsread function may point past the end of the storage allocated for the buffer, resulting in information disclosure...

CVE-2022-40816

Zammad 5.2.1 is vulnerable to Incorrect Access Control. Zammad's asset handling mechanism has logic to ensure that customer users are not able to see personal information of other users. This logic was not effective when used through a web socket connection, so that a logged-in attacker would be...

DoS via Collaborative Document

Description An attacker can send an enormous payload via the WebSockets collaborative document feature, without any proper size restriction, leading to the unresponsiveness of every user browser that visits the target document, and even worse, if the payload is bigger enough, in the demonstration...

io.undertow:undertow-servlet (1.3.30.final), io.undertow:undertow-websockets-jsr (1.3.30.final) +6 more potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.3.30.final)

io.undertow:undertow-core MAVEN version 1.3.30.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.30.final - io.undertow:undertow-websockets-jsr 1.3.30.final -...

io.undertow:undertow-servlet (1.0.6.final), io.undertow:undertow-websockets-jsr (1.0.6.final) potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.0.6.final)

io.undertow:undertow-core MAVEN version 1.0.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.6.final - io.undertow:undertow-websockets-jsr 1.0.6.final Source cves:...

io.undertow:undertow-servlet (1.0.4.final), io.undertow:undertow-websockets-jsr (1.0.4.final) potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.0.4.final)

io.undertow:undertow-core MAVEN version 1.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.4.final - io.undertow:undertow-websockets-jsr 1.0.4.final Source cves:...

io.undertow:undertow-servlet (1.0.0.alpha4), io.undertow:undertow-websockets-jsr (1.0.0.alpha4) potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.0.0.alpha4)

io.undertow:undertow-core MAVEN version 1.0.0.alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha4 - io.undertow:undertow-websockets-jsr 1.0.0.alpha4 Source...

io.undertow:undertow-servlet (1.0.0.beta4), io.undertow:undertow-websockets-jsr (1.0.0.beta4) potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.0.0.beta4)

io.undertow:undertow-core MAVEN version 1.0.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta4 - io.undertow:undertow-websockets-jsr 1.0.0.beta4 Source cves:...

com.markelliot.barista:barista (0.9.0), com.markelliot.barista:barista-conjure (0.9.0) +40 more potentially affected by CVE-2022-2053 via io.undertow:undertow-core (2.3.0.alpha1)

io.undertow:undertow-core MAVEN version 2.3.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.markelliot.barista:barista 0.9.0 - com.markelliot.barista:barista-conjure 0.9.0 -...

io.undertow:undertow-servlet (1.4.1.final), io.undertow:undertow-websockets-jsr (1.4.1.final) potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.4.1.final)

io.undertow:undertow-core MAVEN version 1.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.1.final - io.undertow:undertow-websockets-jsr 1.4.1.final Source cves:...

io.undertow:undertow-servlet (1.0.19.final), io.undertow:undertow-websockets-jsr (1.0.19.final) potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.0.19.final)

io.undertow:undertow-core MAVEN version 1.0.19.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.19.final - io.undertow:undertow-websockets-jsr 1.0.19.final Source...

io.undertow:undertow-http2-test-suite (1.3.8.final), io.undertow:undertow-servlet (1.3.8.final) +1 more potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.3.8.final)

io.undertow:undertow-core MAVEN version 1.3.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.8.final - io.undertow:undertow-servlet 1.3.8.final -...

io.undertow:undertow-servlet (1.0.0.beta28), io.undertow:undertow-websockets-jsr (1.0.0.beta28) potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.0.0.beta28)

io.undertow:undertow-core MAVEN version 1.0.0.beta28 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta28 - io.undertow:undertow-websockets-jsr 1.0.0.beta28 Source...

io.undertow:undertow-servlet (1.0.13.final), io.undertow:undertow-websockets-jsr (1.0.13.final) potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.0.13.final)

io.undertow:undertow-core MAVEN version 1.0.13.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.13.final - io.undertow:undertow-websockets-jsr 1.0.13.final Source...

io.undertow:undertow-dist (1.0.0.beta13), io.undertow:undertow-servlet (1.0.0.beta13) +1 more potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.0.0.beta13)

io.undertow:undertow-core MAVEN version 1.0.0.beta13 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-dist 1.0.0.beta13 - io.undertow:undertow-servlet 1.0.0.beta13 -...

io.undertow:undertow-servlet (1.1.5.final), io.undertow:undertow-websockets-jsr (1.1.5.final) potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.1.5.final)

io.undertow:undertow-core MAVEN version 1.1.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.5.final - io.undertow:undertow-websockets-jsr 1.1.5.final Source cves:...

io.undertow:undertow-servlet (1.0.0.alpha10), io.undertow:undertow-websockets-jsr (1.0.0.alpha10) potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.0.0.alpha10)

io.undertow:undertow-core MAVEN version 1.0.0.alpha10 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha10 - io.undertow:undertow-websockets-jsr 1.0.0.alpha10 Source...

io.undertow:undertow-servlet (1.0.0.beta19), io.undertow:undertow-websockets-jsr (1.0.0.beta19) potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.0.0.beta19)

io.undertow:undertow-core MAVEN version 1.0.0.beta19 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta19 - io.undertow:undertow-websockets-jsr 1.0.0.beta19 Source...