Lucene search
GoogleOSV:GHSA-FXWF-4RQH-V8G3HistoryJan 20, 2021 - 9:22 p.m.
CORS misconfiguration in socket.io
2021-01-2021:22:37
Google
osv.dev
13
socket.io
cors
misconfiguration
vulnerability
whitelist
EPSS
0.002
Percentile
53.0%
The package socket.io before 2.4.0 are vulnerable to Insecure Defaults due to CORS Misconfiguration. All domains are whitelisted by default.
Related
veracode
veracode
Insecure Cross-Origin Resource Sharing Configuration
2021-01-20 06:58:10
nodejs
nodejs
Insecure Default Configuration
2021-02-19 22:40:51
osv
osv
CVE-2020-28481
2021-01-19 15:15:12
nvd
nvd
CVE-2020-28481
2021-01-19 15:15:12
cve
cve
CVE-2020-28481
2021-01-19 15:15:12
prion
prion
Default credentials
2021-01-19 15:15:00
cvelist
cvelist
CVE-2020-28481 Insecure Defaults
2021-01-19 14:45:17
github
github
CORS misconfiguration in socket.io
2021-01-20 21:22:37