1 matches found
GHSA-GR94-W7QR-F4J3 Socket.IO: Engine.IO WebTransport SID DoS
Impact Engine.IO servers with WebTransport enabled are vulnerable to a remotely triggerable denial of service. A malicious unauthenticated client can send a crafted WebTransport upgrade request containing a specially chosen session ID, such as proto. Because the session ID lookup did not properly...
7.5CVSS5.9AI score0.00609EPSS
SaveExploits0References5
20