Sails is a realtime MVC Framework for Node.js. In Sails apps prior to version 1.5.7,, an attacker can send a virtual request that will cause the node process to crash. This behavior was fixed in Sails v1.5.7. As a workaround, disable the sockets hook and remove the `sails.io.js` client.
Metrics
Affected Vendors & Products
References
History
Thu, 03 Oct 2024 19:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:sailsjs:sails:*:*:*:*:*:*:*:* | |
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2023-07-27T18:12:05.419Z
Updated: 2024-10-03T18:39:16.029Z
Reserved: 2023-07-18T16:28:12.077Z
Link: CVE-2023-38504
Vulnrichment
Updated: 2024-08-02T17:46:55.179Z
NVD
Status : Modified
Published: 2023-07-27T19:15:10.117
Modified: 2024-11-21T08:13:42.810
Link: CVE-2023-38504
Redhat
No data.