CoreCVE
Back

CRITICAL

lukehutch Gribbit HttpRequestHandler.java messageReceived missing origin validation in websockets

Published Jan 9, 2023

Description

A vulnerability was found in lukehutch Gribbit. It has been classified as problematic. Affected is the function messageReceived of the file src/gribbit/request/HttpRequestHandler.java. The manipulation leads to missing origin validation in websockets. The name of the patch is 620418df247aebda3dd4be1dda10fe229ea505dd. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217716.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-1385

CWE-346

References (3)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Jan 9, 2023
Updated Nov 25, 2024
Reserved Jan 9, 2023
Link CVE-2014-125071
CISA Vulnrichment
Updated Nov 25, 2024
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2014-125071
Red Hat
Severity n/a
Public date n/a
Links CVE-2014-125071