Beveiligingsadvies

CVE-2021-4236

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-12-27 21:13:45

Laatst bijgewerkt 2025-04-11 16:20:55

Toegewezen door Go

CVSS-score 9.8

Status PUBLISHED

Beschrijving

Web Sockets do not execute any AuthenticateMethod methods which may be set, leading to a nil pointer dereference if the returned UserData pointer is assumed to be non-nil, or authentication bypass. This issue only affects WebSockets with an AuthenticateMethod hook. Request handlers that do not explicitly use WebSockets are not vulnerable.

← Alle CVE's bekijken Bekijk op cve.org ↗