Skip to content

Product

org.cometd.java/cometd-java-oort vulnerabilities

1 published CVE affecting org.cometd.java/cometd-java-oort, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest org.cometd.java/cometd-java-oort CVEs

Newest publication first

  1. CVE-2022-24721 Incorrect Authorization in org.cometd.oort

    Published
    HighCVSS 8.1 EPSS 1.1%

    CometD is a scalable comet implementation for web messaging. In any version prior to 5.0.11, 6.0.6, and 7.0.6, internal usage of Oort and Seti channels is improperly authorized, so any remote user could subscribe and publish to those channels. By subscribing to those channels, a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.