EUVD-2020-0552

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Sails.js before version 1.0.0-46 allows denial of service via an unhandled empty pathname in WebSocket request

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2018-21036	21 Jul 202018:55	–	circl
CVE	CVE-2018-21036	21 Jul 202013:14	–	cve
Cvelist	CVE-2018-21036	21 Jul 202013:14	–	cvelist
Github Security Blog	Improper Input Validation in sails-hook-sockets	24 Jul 202020:10	–	github
NVD	CVE-2018-21036	21 Jul 202014:15	–	nvd
OSV	GHSA-F7F4-HQP2-7PRC Improper Input Validation in sails-hook-sockets	24 Jul 202020:10	–	osv
Prion	Cross site request forgery (csrf)	21 Jul 202014:15	–	prion
RedhatCVE	CVE-2018-21036	22 May 202503:42	–	redhatcve
Veracode	Denial Of Service (DoS)	22 Jul 202002:24	–	veracode
vulnersOsv	webfm (>=0.9.0, <=0.9.37) potentially affected by CVE-2018-21036 via sails-hook-sockets (1.4.3)	24 Jul 202020:10	–	vulnersosv

[
  {
    "enisaIdVendor": [
      {
        "id": "8266b995-d17b-3673-beb6-267d6fba0c03",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "3b74323d-5904-3c5f-bebb-72b1e8b7a541",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-21036
github	www.github.com/balderdashy/sails-hook-sockets/commit/0533a4864b1920fd8fbb5287bc0889193c5faf44
github	www.github.com/balderdashy/sails-hook-sockets/commit/ff02114eaec090ee51db48435cc32d451662606e
github	www.github.com/balderdashy/sails-hook-sockets
github	www.github.com/balderdashy/sails/blob/56f8276f6501a144a03d1f0f28df4ccdb4ad82e2/CHANGELOG.md
openwall	www.openwall.com/lists/oss-security/2020/07/19/1
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

CVSS 25

EPSS0.01769