Lucene search
AnonymousNODEJS:1609HistoryFeb 19, 2021 - 10:40 p.m.
Insecure Default Configuration
2021-02-1922:40:51
Anonymous
www.npmjs.com
67
0.002 Low
EPSS
Percentile
53.0%
Overview
Affected versions of socket.io are vulnerable to Insecure Defaults due to CORS Misconfiguration. All domains are whitelisted by default.
Recommendation
Update to version 2.4.0 or later.
References
Related
osv
osv
CVE-2020-28481
2021-01-19 15:15:12
CORS misconfiguration in socket.io
2021-01-20 21:22:37
nvd
nvd
CVE-2020-28481
2021-01-19 15:15:12
cve
cve
CVE-2020-28481
2021-01-19 15:15:12
cvelist
cvelist
CVE-2020-28481 Insecure Defaults
2021-01-19 00:00:00
prion
prion
Default credentials
2021-01-19 15:15:00
github
github
CORS misconfiguration in socket.io
2021-01-20 21:22:37
veracode
veracode
Insecure Cross-Origin Resource Sharing Configuration
2021-01-20 06:58:10