PT-2022-15028 · Socket.Io+2 · Socket.Io+2

Marcus Wejderot · Published 2022-01-12 · Updated 2023-06-27 · CVE-2022-21676

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

[Content removed]

Exploit

Fix

Improper Handling of Exceptional Conditions

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-755

CWE-754

Related Identifiers

CVE-2022-21676

GHSA-273R-MGR4-V34F

Affected Products

Node.Js

Engine.Io

Socket.Io

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/21xxx/CVE-2022-21676.json · Exploit
• https://github.com/socketio/engine.io/commit/66f889fc1d966bf5bfa0de1939069153643874ab · Patch
• https://github.com/socketio/engine.io/commit/a70800d7e96da32f6e6622804ef659ebc58659db · Patch
• https://github.com/socketio/engine.io/commit/c0e194d44933bd83bf9a4b126fca68ba7bf5098c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-21676 · Security Note
• https://osv.dev/vulnerability/GHSA-273r-mgr4-v34f · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-21676 · Vendor Advisory
• https://github.com/socketio/engine.io/releases/tag/4.1.2 · Note
• https://github.com/socketio/engine.io · Note
• https://github.com/socketio/engine.io/releases/tag/6.1.1 · Note
• https://github.com/socketio/engine.io/security/advisories/GHSA-273r-mgr4-v34f · Note
• https://github.com/socketio/engine.io/releases/tag/5.2.1 · Note
• https://t.me/cvenotify/53179 · Telegram Post
• https://t.me/cibsecurity/35354 · Telegram Post
• https://t.me/cvenotify/31557 · Telegram Post