Lucene search
AnonymousNODEJS:1609HistoryFeb 19, 2021 - 10:40 p.m.
Insecure Default Configuration
2021-02-1922:40:51
Anonymous
www.npmjs.com
68
socket.io
insecure defaults
cors misconfiguration
whitelisted domains
update required
EPSS
0.002
Percentile
53.0%
Overview
Affected versions of socket.io are vulnerable to Insecure Defaults due to CORS Misconfiguration. All domains are whitelisted by default.
Recommendation
Update to version 2.4.0 or later.
References
Related
osv
osv
CORS misconfiguration in socket.io
2021-01-20 21:22:37
CVE-2020-28481
2021-01-19 15:15:12
veracode
veracode
Insecure Cross-Origin Resource Sharing Configuration
2021-01-20 06:58:10
nvd
nvd
CVE-2020-28481
2021-01-19 15:15:12
prion
prion
Default credentials
2021-01-19 15:15:00
cvelist
cvelist
CVE-2020-28481 Insecure Defaults
2021-01-19 14:45:17
github
github
CORS misconfiguration in socket.io
2021-01-20 21:22:37
cve
cve
CVE-2020-28481
2021-01-19 15:15:12