Skip to content
OpenAdvisories

Package · Maven

org.cometd.java:cometd-java-oort

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2022-24721

    Incorrect Authorization in org.cometd.oort

    CometD is a scalable comet implementation for web messaging. In any version prior to 5.0.11, 6.0.6, and 7.0.6, internal usage of Oort and Seti channels is improperly authorized, so any remote user could subscribe and publish to those channels. By subscribing …

    cometd cometd org.cometd.java:cometd-java-oort Maven