CVE-2023-37544
1 advisory.
Maven/org.apache.pulsar:pulsar-websocket CVE-2023-37544: high 7.5
Apache Pulsar WebSocket Proxy contains an Improper Authentication vulnerability
Action: Upgrade org.apache.pulsar:pulsar-websocket to 2.10.5 (2.10.x), 2.11.2 (2.11.x) or 3.0.1 (3.0.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.10.5 | - |
| 2.11.0 | 2.11.2 | - |
| 3.0.0 | 3.0.1 | - |
Fixed versions
| 2.10.5 | 2.11.2 | 3.0.1 |
Sources
- osv: GHSA-83q5-whqp-r8jr
- https://nvd.nist.gov/vuln/detail/CVE-2023-37544
- https://github.com/apache/pulsar/commit/11ee36d0351644a006d2a8639bdcc714fb602358
- https://github.com/apache/pulsar/commit/894192fb6542e504be43034a3c33e90f9c6e528a
- https://github.com/apache/pulsar/commit/eac263e8f2a93d3b9f707b97c7bbcbc2a826569f
- https://github.com/apache/pulsar
- https://lists.apache.org/thread/od0k9zts1toc9h9snbqq4pjpyx28mv4m
- http://www.openwall.com/lists/oss-security/2023/12/20/2
CVE-2023-37544 · published · modified · JSON