imbpa.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1137312 Security Researcher kun-fly Helped patch 668 vulnerabilities Received 7 Coordinated Disclosure badges Received 43 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting imbpa.com website and its...

@sematext/logagent (>=2.0.101, <=2.0.126), cashew-mqtt (>=0.0.6, <=0.1.20) +7 more potentially affected by CVE-2018-3778 via aedes (>=0.9.0, <=0.34.1)

aedes NPM version =0.9.0, =2.0.101, =0.0.6, =0.1.0, =0.0.1, =0.5.1, =1.0.2, =0.0.1, =0.5.1, =0.5.16 Source cves: CVE-2018-3778 Source advisory: OSV:GHSA-4CMX-HRQ9-C23P...

CVE-2018-3778

Improper authorization in aedes version 0.35.0 will publish a LWT in a channel when a client is not authorized...

CVE-2018-3778

Affected software: aedes (MQTT broker) prior to version 0.35.1. Root cause: improper authorization allows publishing a Last Will (LWT) in a channel when a client is not authorized. Impact: potential unauthorized LWT publication in a channel; explicit exploitation details are not provided in the d...