Security Advisory

CVE-2021-4236

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-12-27 21:13:45

Last updated 2025-04-11 16:20:55

Assigner Go

State PUBLISHED

Description

Web Sockets do not execute any AuthenticateMethod methods which may be set, leading to a nil pointer dereference if the returned UserData pointer is assumed to be non-nil, or authentication bypass. This issue only affects WebSockets with an AuthenticateMethod hook. Request handlers that do not explicitly use WebSockets are not vulnerable.

← Browse all CVEs View on cve.org ↗