CVE-2020-24928

The CVE-2020-24928 entry concerns PreMiD (through version 2.1.3). In the socketManager.ts module, a locally hosted Socket.IO web server (port 3020) is exposed to all origins, enabling access to sensitive Discord user information. This describes an insecure cross-origin configuration rather than a...