cve/2020/CVE-2020-7693.md

CVE-2020-7693

Description

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20.

POC

Reference

• https://github.com/andsnw/sockjs-dos-py
• https://github.com/andsnw/sockjs-dos-py
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-575448
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-575448
• https://snyk.io/vuln/SNYK-JS-SOCKJS-575261
• https://snyk.io/vuln/SNYK-JS-SOCKJS-575261

Github

• https://github.com/0xT11/CVE-POC
• https://github.com/ARPSyndicate/cvemon
• https://github.com/andsnw/sockjs-dos-py
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/soosmile/POC