10cartsharing (>=1.0.0 <=1.0.3), 1api (>=0.0.1 <=0.0.2) +7973 more potentially affected by CVE-2020-28481 via socket.io (>=0.5.3 <=2.3.0)

socket.io NPM version =0.5.3, =1.0.0, =0.0.1, =0.1.0, =1.0.2, =0.1.0, =0.0.1, =1.0.0, =4.11.25, =0.1.4, =0.0.15, =0.0.16 and more Source cves: CVE-2020-28481 Source advisory: OSV:GHSA-FXWF-4RQH-V8G3...

CVE-2020-28481

creationtimestamp| type| source ---|---|--- 2021-01-19 18:56:04+00:00| seen| https://t.me/cibsecurity/22266...

AZL-44430 CVE-2020-28481 affecting package js-jquery 3.5.0-4

The package socket.io before 2.4.0 are vulnerable to Insecure Defaults due to CORS Misconfiguration. All domains are whitelisted by default...

CVE-2020-28481

CVE-2020-28481 affects the socket.io package prior to 2.4.0, where an insecure default configuration enables CORS misconfiguration with all domains whitelisted by default. This misconfiguration can lead to cross-origin information disclosure according to multiple sources. The issue is fixed by up...

7ghost (>=4.11.25 <=4.11.46), @abcpros/bitcore-build (>=8.25.29 <=8.25.30) +1095 more potentially affected by CVE-2020-28481 via socket.io (>=2.0.1 <=2.3.0)

socket.io NPM version =2.0.1, =4.11.25, =8.25.29, =1.0.0, =0.0.4, =1.0.9, =1.1.13, =2018.7.11-0, =0.1.14, =0.0.1, =0.0.1, =1.0.0-alpha.18, =2.0.0, =2.2.0-alpha.1 and more Source cves: CVE-2020-28481 Source advisory: SNYK:JS-SOCKETIO-1024859...