5.3
Moyenne
CVE-2020-28481 The package socket.io before 2.4.0 are vulnerable to Insecure Defaults due to CORS Misconfiguration
Description
The package socket.io before 2.4.0 are vulnerable to Insecure Defaults due to CORS Misconfiguration. All domains are whitelisted by default.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| socket.io 2.4 | premières → < 2.4.0 | 2.4.0 |