CVE-2018-3778 Improper Authorization in aedes
MediumCVSS 5.3
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Improper authorization in aedes version <0.35.0 will publish a LWT in a channel when a client is not authorized.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm aedes(npm) | < 0.35.1 | 0.35.1 |
| aedes project aedes | < 0.35.0 | 0.35.0 |
| HackerOne aedes | = >=0.35.1 | No fix listed |
References
- nvd.nist.gov third-party-advisory
- github.com third-party-advisory
- github.com
- github.com
- github.com patch
- github.com
- github.com issue-tracking patch third-party-advisory
- github.com issue-tracking third-party-advisory