What is GHSA-gvrq-cg5r-7chp?

GHSA-gvrq-cg5r-7chp is a security advisory published by GitHub Security Advisories with Medium severity. Vert.x STOMP server process client frames that would not send initially a connect frame

Which CVE IDs does GHSA-gvrq-cg5r-7chp cover?

GHSA-gvrq-cg5r-7chp covers the following CVE IDs: CVE-2023-32081. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gvrq-cg5r-7chp?

GHSA-gvrq-cg5r-7chp has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-gvrq-cg5r-7chp?

GHSA-gvrq-cg5r-7chp affects 2 products, including: maven/io.vertx:vertx-stomp:\u003e= 3.1.0, \u003c 3.9.16; maven/io.vertx:vertx-stomp:\u003e= 4.0.0, \u003c 4.4.2.

GHSA-gvrq-cg5r-7chpMediumCVSS 6.5

Vert.x STOMP server process client frames that would not send initially a connect frame

Vendor

GitHub Security Advisories

Published

May 12, 2023

Last Modified

November 11, 2023

🔗 CVE IDs covered (1)

CVE-2023-32081 →

📋 Description

Impact

A Vert.x STOMP server processes client STOMP frames without checking that the client send an initial CONNECT frame replied with a successful CONNECTED frame. The client can subscribe to a destination or publish message without prior authentication. Any Vert.x STOMP server configured with an authentication handler is impacted.

Patches

The issue is patched in Vert.x 4.4.2 and Vert.x 3.9.16

Workarounds

No trivial workaround.

🎯 Affected products2

maven/io.vertx:vertx-stomp:>= 3.1.0, < 3.9.16
maven/io.vertx:vertx-stomp:>= 4.0.0, < 4.4.2

🔗 References (4)

https://github.com/vert-x3/vertx-stomp/security/advisories/GHSA-gvrq-cg5r-7chp
https://nvd.nist.gov/vuln/detail/CVE-2023-32081
https://github.com/vert-x3/vertx-stomp/commit/0de4bc5a44ddb57e74d92c445f16456fa03f265b
https://github.com/advisories/GHSA-gvrq-cg5r-7chp