Denial Of Service (DoS)

2020-07-2202:24:37

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

EPSS

0.002

Percentile

64.8%

JSON

sails-hook-sockets is vulnerable to denial of service (DoS). An attacker can send a WebSocket request with an empty string to the URL pathname variable to trigger an application crash as the error was not handled.

References

www.openwall.com/lists/oss-security/2020/07/19/1

github.com/balderdashy/sails-hook-sockets/commit/0533a4864b1920fd8fbb5287bc0889193c5faf44

github.com/balderdashy/sails-hook-sockets/commit/ff02114eaec090ee51db48435cc32d451662606e

github.com/balderdashy/sails-hook-sockets/compare/04e71df723c43304c2bfaa398bea7981d3637d64...0533a4864b1920fd8fbb5287bc0889193c5faf44

github.com/balderdashy/sails/blob/56f8276f6501a144a03d1f0f28df4ccdb4ad82e2/CHANGELOG.md

EPSS

0.002

Percentile

64.8%

JSON

Related for VERACODE:25932