SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  NodeBB socket.io eventName DoS 4

Category: WEB-ATTACKS      

Denial-of-service in NodeBB <= v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking `eventName.startsWith()` or `eventName.toString()`, while processing Socket.IO messages via crafted Socket.IO messages containing array or object type for the event name respectively.


Relevant Information