Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Geemus

#46905of 56,326
5.9Total CVSS
Vulnerabilities · 1
PT-2019-14830
5.9
2019-12-16
Excon · Excon · CVE-2019-16779
**Name of the Vulnerable Software and Affected Versions** excon versions prior to 0.71.0 **Description** The issue is related to a race condition around persistent connections in excon, where an interrupted connection, such as by a timeout, would leave data on the socket. Subsequent requests would then read this data, returning content from the previous response. The race condition window appears to be short, making it difficult to purposefully exploit. **Recommendations** For versions prior to 0.71.0, upgrade to version 0.71.0 or a newer version if available. As a temporary workaround, consider disabling persistent connections to minimize the risk of exploitation, though this may cause performance implications.