Socket.io zero-day exploited in the wild (CVE-2020-24807)

Posted by stepan_ on Thursday October 08, 2020 @06:25PM
from the lab.wallarm.com dept.

( 1 comment | 2 points | on HN )

Re:Socket.io zero-day exploited in the wild (CVE-2020-24807) by ericalexander2 on Thursday October 08, 2020 @07:09PM (#24724932)

Vulnerability is in socket.io-file. Package is downloaded about 500 times a week. The more popular socket.io is not dependant.

[ Parent | on HN ]