CVE-2022-2421 — Socket.io - Improper type validation in attachment parsing
Due to improper type validation in attachment parsing the Socket.io js library, it is possible to overwrite the _placeholder object which allows an attacker to place references …
Published: 2022-10-25 · CVSS: 10.0 · CVSS 3.1
Due to improper type validation in attachment parsing the Socket.io js library, it is possible to overwrite the _placeholder object which allows an attacker to place references to functions at arbitrary places in the resulting query object.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7