PT-2020-15860
CVE-2020-24928
·
تاريخ النشر
2020-08-29
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
PreMiD versions through 2.1.3
Description
The issue concerns a locally hosted socketio web server in PreMiD, which is open to all origins on port 3020. This allows attackers to obtain sensitive Discord user information.
Recommendations
For versions through 2.1.3, consider restricting access to the socketio web server on port 3020 to prevent unauthorized access until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾