medium5.3
CVE-2020-7693
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps.
Impact
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sockjs Project | Sockjs | before 0.3.20 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/andsnw/sockjs-dos-py
- https://github.com/sockjs/sockjs-node/commit/dd7e642cd69ee74385825816d30642c43e051d16
- https://github.com/sockjs/sockjs-node/issues/252
- https://github.com/sockjs/sockjs-node/pull/265
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-575448
- https://snyk.io/vuln/SNYK-JS-SOCKJS-575261
- https://github.com/andsnw/sockjs-dos-py
- https://github.com/sockjs/sockjs-node/commit/dd7e642cd69ee74385825816d30642c43e051d16
- https://github.com/sockjs/sockjs-node/issues/252
- https://github.com/sockjs/sockjs-node/pull/265
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-575448
- https://snyk.io/vuln/SNYK-JS-SOCKJS-575261