Description
Improper authorization in aedes version <0.35.0 will publish a LWT in a channel when a client is not authorized.
Remediation
References
https://github.com/mcollina/aedes/issues/211
https://github.com/mcollina/aedes/issues/212
https://github.com/nodejs/security-wg/blob/master/vuln/npm/457.json
Related Vulnerabilities
CVE-2020-16022 Vulnerability in maven package org.webjars.npm:electron
CVE-2022-43425 Vulnerability in maven package io.jenkins.plugins:custom-checkbox-parameter
CVE-2023-46502 Vulnerability in maven package org.opencrx:opencrx-core
CVE-2022-43396 Vulnerability in maven package org.apache.kylin:kylin-spark-engine
CVE-2023-44487 Vulnerability in maven package io.helidon.http:helidon-http-http2