| Package | Affected versions | Patched versions |
|---|---|---|
| mosquitto | ≥ 1.5, < 1.5.5 | 1.5.5 |
Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was set to true, and the default listener was in use, and the default listener specified an acl_file, then the acl file was being ignored.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free