PT-2023-23969 · Npm+1 · Socket.Io+2

Rafax00 · Publicado 2023-05-23 · Atualizado 2026-06-04 · CVE-2023-32695

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

[Content removed]

Exploit

Correção

RCE

Improper Check for Exceptional Conditions

Enumeração de Fraquezas

CWE-20

CWE-754

Identificadores relacionados

CVE-2023-32695

GHSA-CQMJ-92XF-R6R9

Produtos afetados

Node.Js

Socket.Io

Socket.Io-Parser

Referências · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/32xxx/CVE-2023-32695.json · Exploit
• https://github.com/socketio/socket.io-parser/commit/3b78117bf6ba7e99d7a5cfc1ba54d0477554a7f3 · Correção
• https://github.com/socketio/socket.io-parser/security/advisories/GHSA-cqmj-92xf-r6r9 · Aviso do Fabricante
• https://github.com/socketio/socket.io-parser/commit/2dc3c92622dad113b8676be06f23b1ed46b02ced · Correção
• https://github.com/socketio/socket.io-parser/releases/tag/4.2.3 · Nota
• https://github.com/socketio/socket.io-parser/commit/1c220ddbf45ea4b44bc8dbf6f9ae245f672ba1b9 · Nota
• https://github.com/socketio/socket.io-parser/commit/ee006607495eca4ec7262ad080dd3a91439a5ba4 · Nota
• https://github.com/socketio/socket.io-parser · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-32695 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-32695 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-32695 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2023-32695 · Nota de Segurança
• https://t.me/cvenotify/51281 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-cqmj-92xf-r6r9 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2023-32695 · Aviso do Fabricante