0726react (0.1.1), 0x0.icu.anima (0.1.0) +13079 more potentially affected by CVE-2020-7693 via sockjs (>=0.0.4, <=0.3.19)

sockjs NPM version =0.0.4, =1.0.4, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =1.4.0, =1.4.1 and more Source cves: CVE-2020-7693 Source advisory: OSV:GHSA-C9G6-9335-X697...

GHSA-C9G6-9335-X697 Improper Input Validation in SocksJS-Node

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...

Cross-site scripting in SocksJS-node

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c aka callback parameter...

diversion (>=0.2.0, <=0.4.6), push-it (>=0.1.0, <=0.1.4) +1 more potentially affected by CVE-2020-8823 via sockjs (>=0.0.4, <=0.2.1)

sockjs NPM version =0.0.4, =0.2.0, =0.1.0, =0.0.0pre25, =0.0.0pre31 Source cves: CVE-2020-8823 Source advisory: OSV:GHSA-HH8V-JMH3-9437...

diversion (>=0.2.0, <=0.4.6), push-it (>=0.1.0, <=0.1.4) +1 more potentially affected by CVE-2020-8823 via sockjs (>=0.0.4, <=0.2.1)

sockjs NPM version =0.0.4, =0.2.0, =0.1.0, =0.0.0pre25, =0.0.0pre31 Source cves: CVE-2020-8823 Source advisory: GHSA-HH8V-JMH3-9437...

Automattic: Reflected XSS due to vulnerable version of sockjs

Summary: There is reflected XSS on .simperium.com. The bug exists due to a vulnerable version of sockjs library. Platforms Affected: simperium.com js.simperium.com Steps To Reproduce: 1. Visit https://simperium.com/sock/1/0/0/0/htmlfile?c=alert'XSS'// 2. You will see an alert message because of...

CVE-2020-7693

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20. Mitigation There is no mitigation for this issue, the flaw can only be resolved by applying updates...

Denial Of Service (DoS)

sockjs is vulnerable to denial of service DoS. The vulnerability exists as the res.end gets called twice when improperly handling the Upgrade header with an incorrect URL...

SockJS Input Validation Error Vulnerability

SockJS is a browser JavaScript library . A security vulnerability exists in SockJS versions prior to 0.3.20, which stems from the program's failure to properly handle the Upgrade header. An attacker could exploit this vulnerability to cause the container hosting the sockjs application to crash...

CVE-2020-7693

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...

CVE-2020-7693

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...

Code injection

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...

CVE-2020-7693

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...

CVE-2020-7693 Denial of Service (DoS)

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...

CVE-2020-7693

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...

0726react (0.1.1), 0x0.icu.anima (0.1.0) +13079 more potentially affected by CVE-2020-7693 via sockjs (>=0.0.4, <=0.3.19)

sockjs NPM version =0.0.4, =1.0.4, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =1.4.0, =1.4.1 and more Source cves: CVE-2020-7693 Source advisory: MEND:CVE-2020-7693...

CVE-2020-7693

CVE-2020-7693 affects SockJS sockjs-node before 0.3.20. The issue is caused by improper handling of the Upgrade header with the value websocket, which can crash containers hosting SockJS apps. Severity per CVSS indicates a MEDIUM impact (availability impact = LOW). Remediation: upgrade SockJS to ...

CVE-2020-7693

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...

CVE-2020-7693: Improper Handling of Exceptional Conditions

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...

PT-2020-19716

Name of the Vulnerable Software and Affected Versions sockjs versions prior to 0.3.20 Description The issue arises from incorrect handling of the Upgrade header with the value websocket, leading to the crashing of containers hosting sockjs apps. Recommendations For versions prior to 0.3.20, updat...