Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38678
HistoryDec 28, 2022 - 8:38 a.m.

Denial Of Service (DoS)

2022-12-2808:38:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
denial of service
vulnerability
websocket.go
authenticatemethod
userdata
panic

EPSS

0.002

Percentile

57.3%

github.com/ecnepsnai/web is vulnerable to denial of service. The vulnerability exists in the socketHandler function in websocket.go because the AuthenticateMethod is not called, and UserData will be nil in request methods which will attempt to read the UserDataand may result in a panic.

EPSS

0.002

Percentile

57.3%

Related for VERACODE:38678