TI-2021-21453 CVE-2021-46701 · GHSA-vhmg-4r23-p6qh
PreMiD 2.2.0 allows unintended access via the websocket transport.
Priority LOW 32
PreMiD 2.2.0 allows unintended access via the websocket transport.
No Premid vulnerabilities are listed in CISA KEV.
2 records
PreMiD 2.2.0 allows unintended access via the websocket transport.
managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server (port 3020) open to all origins, which allows attackers to obtain sensitive Discord user information.