Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2020-28481
PUBLISHED
More InfoOfficial Page
Assigner-snyk
Assigner Org ID-bae035ff-b466-4ff4-94d0-fc9efd9e1730
View Known Exploited Vulnerability (KEV) details
Published At-19 Jan, 2021 | 14:45
Updated At-16 Sep, 2024 | 20:11
Rejected At-
▼CVE Numbering Authority (CNA)
Insecure Defaults

The package socket.io before 2.4.0 are vulnerable to Insecure Defaults due to CORS Misconfiguration. All domains are whitelisted by default.

Affected Products
Vendor
n/a
Product
socket.io
Versions
Affected
  • From unspecified before 2.4.0 (custom)
Problem Types
TypeCWE IDDescription
textN/AInsecure Defaults
Type: text
CWE ID: N/A
Description: Insecure Defaults
Metrics
VersionBase scoreBase severityVector
3.15.3MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
Version: 3.1
Base score: 5.3
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
ni8walk3r
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://snyk.io/vuln/SNYK-JS-SOCKETIO-1024859
x_refsource_MISC
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1056357
x_refsource_MISC
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1056358
x_refsource_MISC
https://github.com/socketio/socket.io/issues/3671
x_refsource_MISC
Hyperlink: https://snyk.io/vuln/SNYK-JS-SOCKETIO-1024859
Resource:
x_refsource_MISC
Hyperlink: https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1056357
Resource:
x_refsource_MISC
Hyperlink: https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1056358
Resource:
x_refsource_MISC
Hyperlink: https://github.com/socketio/socket.io/issues/3671
Resource:
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://snyk.io/vuln/SNYK-JS-SOCKETIO-1024859
x_refsource_MISC
x_transferred
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1056357
x_refsource_MISC
x_transferred
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1056358
x_refsource_MISC
x_transferred
https://github.com/socketio/socket.io/issues/3671
x_refsource_MISC
x_transferred
Hyperlink: https://snyk.io/vuln/SNYK-JS-SOCKETIO-1024859
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1056357
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1056358
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://github.com/socketio/socket.io/issues/3671
Resource:
x_refsource_MISC
x_transferred
Details not found