Vert.x STOMP server process client frames that would not send initially a connect frame

中 6.5CVE-2023-32081 · GHSA-gvrq-cg5r-7chp · 12/05/2023 公開 · 17/06/2026 更新

要点

CVE-2023-32081 は io.vertx:vertx-stomp, vert.x stomp (eclipse) に影響する深刻度「中」 (CVSS 6.5) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.51%（全脆弱性の 43.6% より高い）。
対処：3.9.16, 4.4.2 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
io.vertx:vertx-stomp Maven	`≥ 3.1.0, < 3.9.16≥ 4.0.0, < 4.4.2`	`3.9.164.4.2`
vert.x stomp eclipse	`≥ 3.1.0, < 3.9.16≥ 4.0.0, < 4.4.2`	`3.9.164.4.2`

概要

Impact

A Vert.x STOMP server processes client STOMP frames without checking that the client send an initial CONNECT frame replied with a successful CONNECTED frame. The client can subscribe to a destination or publish message without prior authentication. Any Vert.x STOMP server configured with an authentication handler is impacted.

Patches

The issue is patched in Vert.x 4.4.2 and Vert.x 3.9.16

Workarounds

No trivial workaround.

NVD の説明

Vert.x STOMP is a vert.x implementation of the STOMP specification that provides a STOMP server and client. From versions 3.1.0 until 3.9.16 and 4.0.0 until 4.4.2, a Vert.x STOMP server processes client STOMP frames without checking that the client send an initial CONNECT frame replied with a successful CONNECTED frame. The client can subscribe to a destination or publish message without prior authentication. Any Vert.x STOMP server configured with an authentication handler is impacted. The issue is patched in Vert.x 3.9.16 and 4.4.2. There are no trivial workarounds.