Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2020-8823

sockJS: function htmlfile is not checking the non-alphanumeric symbols which could result in reflected XSS

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c (aka callback) parameter.

CVSS 3.1 · 6.1 Medium EPSS 1.9% KEV · Not listed
Vendors
Sockjs Project
Products
Sockjs
CVE-2020-7693

Denial of Service (DoS)

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20.

CVSS 3.1 · 5.3 Medium EPSS 5.0% KEV · Not listed
Vendors
Sockjs Project
Products
Sockjs