CVE-2020-7693

medium

Description

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20.

References

Advisories
More

https://github.com/sockjs/sockjs-node/pull/265

https://github.com/sockjs/sockjs-node/commit/dd7e642cd69ee74385825816d30642c43e051d16

https://snyk.io/vuln/SNYK-JS-SOCKJS-575261

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-575448

https://github.com/sockjs/sockjs-node/issues/252

https://github.com/andsnw/sockjs-dos-py

Details

Source: Mitre, NVD

Published: 2020-07-09

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L