CVE-2021-34434 log

Severity Medium
Remote Yes
Type Access restriction bypass
In Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the ability for a client to make subscriptions on a topic is revoked when a durable client is offline, then existing subscriptions for that client are not revoked.
Group Package Affected Fixed Severity Status Ticket
AVG-2332 mosquitto 2.0.11-1 2.0.12-1 Medium Fixed