CVE-2023-38504
Sails DoS vulnerability for apps with sockets enabled
Résumé
Sails DoS vulnerability for apps with sockets enabled
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Sails is a realtime MVC Framework for Node.js. In Sails apps prior to version 1.5.7,, an attacker can send a virtual request that will cause the node process to crash. This behavior was fixed in Sails v1.5.7. As a workaround, disable the sockets hook and remove the sails.io.js client.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web github.com