CVE-2020-24807: Preventing critical Socket.IO vulnerability

2020-10-0820:36:02

Ivanwallarm

lab.wallarm.com

112

cve-2020-24807

socket.io

vulnerability

websocket

restriction bypass

EPSS

0.009

Percentile

82.5%

JSON

This year is full of extraordinary events and cybersecurity domains are not an exception. Massive WebSocket vulnerabilities are not so often discovered, we can say they are piece. But here is a new one, named CVE-2020-24807 was mentioned in a Socket.io advisory 6 days ago: https://github.com/advisories/GHSA-6495-8jvh-f28x This file type restriction bypass vulnerability is technically an […]

The post CVE-2020-24807: Preventing critical Socket.IO vulnerability appeared first on Wallarm Blog.