Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40519
HistoryMay 15, 2023 - 3:47 a.m.

Improper Authentication

2023-05-1503:47:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
vertx-stomp
vulnerability
authentication
software
stomp
servers
client frames
attacker
subscribe

0.001 Low

EPSS

Percentile

41.3%

vertx-stomp is vulnerable to Improper Authentication. Without requiring a prior CONNECT frame reply with a successful CONNECTED frame, Vert.x STOMP servers handle client STOMP frames, enabling clients to publish messages or subscribe to destinations, resulting in an attacker subscribing to a destination or publish message without prior authentication.

0.001 Low

EPSS

Percentile

41.3%