Lucene search
GoogleOSV:GHSA-R2GR-FHMR-66C5HistoryMay 10, 2021 - 6:38 p.m.
"Arbitrary code execution in socket.io-file"
2021-05-1018:38:11
Google
osv.dev
7
0.009 Low
EPSS
Percentile
83.1%
“The socket.io-file package through 2.0.31 for Node.js relies on client-side validation of file types, which allows remote attackers to execute arbitrary code by uploading an executable file via a modified JSON name field. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| socket.io-file | le | 2.0.31 |
Related
cve
cve
CVE-2020-24807
2020-10-06 18:15:17
osv
osv
File restriction bypass in socket.io-file
2020-10-02 15:39:54
wallarmlab
wallarmlab
CVE-2020-24807: Preventing critical Socket.IO vulnerability
2020-10-08 20:36:02
github
github
"Arbitrary code execution in socket.io-file"
2021-05-10 18:38:11
cvelist
cvelist
CVE-2020-24807
2020-10-06 17:10:17
prion
prion
Input validation
2020-10-06 18:15:00
veracode
veracode
Authorization Bypass
2020-10-05 03:55:32
nvd
nvd
CVE-2020-24807
2020-10-06 18:15:17