Lucene search
Veracode Vulnerability DatabaseVERACODE:38184HistoryNov 23, 2022 - 8:32 a.m.
Denial Of Service (DoS)
2022-11-2308:32:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
dos vulnerability
nodejs crash
http request not triggered
0.001 Low
EPSS
Percentile
35.4%
engine.io is vulnerable to denial of service. The vulnerability exists in setTimeout parameter in server.js because the HTTP request is not properly triggered which allows to attacker to crash NodeJS.
Related
redhatcve
redhatcve
CVE-2022-41940
2022-11-22 19:56:41
cve
cve
CVE-2022-41940
2022-11-22 01:15:37
osv
osv
Uncaught exception in engine.io
2022-11-21 23:55:41
CVE-2022-41940
2022-11-22 01:15:37
github
github
Uncaught exception in engine.io
2022-11-21 23:55:41
ibm
ibm
cvelist
cvelist
CVE-2022-41940 Uncaught exception in engine.io
2022-11-22 00:00:00
nvd
nvd
CVE-2022-41940
2022-11-22 01:15:37
prion
prion
Cross site scripting
2022-11-22 01:15:00
cnvd
cnvd
Socketio Engine.IO Denial of Service Vulnerability
2022-11-24 00:00:00
redhat
redhat
(RHSA-2023:3954) Critical: Red Hat Fuse 7.12 release and security update
2023-06-29 20:05:32