Lucene search
GoogleOSV:CVE-2020-28481HistoryJan 19, 2021 - 3:15 p.m.
CVE-2020-28481
2021-01-1915:15:12
Google
osv.dev
3
socket.io
insecure defaults
cors
misconfiguration
whitelisted
software
The package socket.io before 2.4.0 are vulnerable to Insecure Defaults due to CORS Misconfiguration. All domains are whitelisted by default.
Related
osv
osv
CORS misconfiguration in socket.io
2021-01-20 21:22:37
veracode
veracode
Insecure Cross-Origin Resource Sharing Configuration
2021-01-20 06:58:10
nodejs
nodejs
Insecure Default Configuration
2021-02-19 22:40:51
nvd
nvd
CVE-2020-28481
2021-01-19 15:15:12
prion
prion
Default credentials
2021-01-19 15:15:00
cvelist
cvelist
CVE-2020-28481 Insecure Defaults
2021-01-19 14:45:17
github
github
CORS misconfiguration in socket.io
2021-01-20 21:22:37
cve
cve
CVE-2020-28481
2021-01-19 15:15:12