4 matches found
CVE-2020-24928
managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...
CVE-2020-24928
managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...
CVE-2020-24928
managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...
CVE-2020-24928
The CVE-2020-24928 entry concerns PreMiD (through version 2.1.3). In the socketManager.ts module, a locally hosted Socket.IO web server (port 3020) is exposed to all origins, enabling access to sensitive Discord user information. This describes an insecure cross-origin configuration rather than a...