CVE-2020-28481

creationtimestamp| type| source ---|---|--- 2021-01-19 18:56:04+00:00| seen| https://t.me/cibsecurity/22266...

AZL-44430 CVE-2020-28481 affecting package js-jquery 3.5.0-4

The package socket.io before 2.4.0 are vulnerable to Insecure Defaults due to CORS Misconfiguration. All domains are whitelisted by default...

CVE-2020-28481

CVE-2020-28481 affects the socket.io package prior to 2.4.0, where an insecure default configuration enables CORS misconfiguration with all domains whitelisted by default. This misconfiguration can lead to cross-origin information disclosure according to multiple sources. The issue is fixed by up...

7ghost (>=4.11.25, <=4.11.46), @abcpros/bitcore-build (>=8.25.29, <=8.25.30) +1110 more potentially affected by CVE-2020-28481 via socket.io (>=2.0.1, <=2.3.0)

socket.io NPM version =2.0.1, =4.11.25, =8.25.29, =1.0.0, =0.0.4, =1.0.9, =1.1.13, =0.2.9-dev-10, =2018.7.11-0, =0.1.14, =0.0.1, =0.0.1, =1.0.0-alpha.18, =1.0.0-feature-e945fc-k9e8d9l7 and more Source cves: CVE-2020-28481 Source advisory: SNYK:JS-SOCKETIO-1024859...