pentester.land· Nov 29, 2021· by sh1yo (@sh1yo_)

[socket.io] Cross-Site Websockets Hijacking

Open Original Article ↗
Target Program: Node.js third-party modules
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Cross-Site Websocket Hijacking (CSWH)