Sockjs Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Sockjs Project records in CISA KEV

No Sockjs Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Sockjs · all components

TI-2020-06213 CVE-2020-7693 · GHSA-c9g6-9335-x697

LOW 32

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04978 Published 2020-07-09 Partial fix · 0.3.20 CWE-755

TI-2020-07080 CVE-2020-8823 · GHSA-hh8v-jmh3-9437

LOW 31

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c (aka callback) parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01886 Published 2020-02-10 Fixed in 0.3.0 CWE-79