Home

Awesome

Awesome WebSockets Security

Awesome

A collection of CVEs, research, and reference materials related to WebSocket security

Contents

<a name="websocket_library_vulnerabilities"></a>WebSocket Library Vulnerabilities

This list of vulnerabilities attempts to capture WebSocket CVEs and related issues in commonly encountered WebSockets server implementations.

CVE IDVulnerable packageRelated writeupVulnerability summary
CVE-2021-42340TomcatApache mailing listDoS memory leak
CVE-2021-33880Python websocketsGitHub AdvisoryHTTP basic auth timing attack
CVE-2021-32640wsGitHub AdvisoryRegex backtracking Denial of Service
CVE-2020-36406uWebSocketsOSS Fuzz SummaryStack buffer overflow
CVE-2020-27813GorillaGitHub AdvisoryInteger overflow
CVE-2020-24807socket.io-fileAuxilium SecurityFile type restriction bypass
CVE-2020-15779socket.io-fileAuxilium SecurityPath traversal
CVE-2020-15134faye-websocketGitHub advisoryLack of TLS certificate validation
CVE-2020-15133faye-websocketGitHub advisoryLack of TLS certificate validation
CVE-2020-11050Java WebSocketGitHub advisorySSL hostname validation not performed
CVE-2020-7663Ruby websocket-extensionsWriteupRegex backtracking Denial of Service
CVE-2020-7662npm websocket-extensionsWriteupRegex backtracking Denial of Service
NoneSocket.ioGitHub IssueCORS misconfiguration
CVE-2018-1000518Python websocketsGitHub PRDoS via memory exhaustion when decompressing compressed data
NoneTornadoGitHub PRDoS via memory exhaustion when decompressing compressed data
CVE-2018-21035Qt WebSocketsBug reportDenial of service due large limit on message and frame size
CVE-2017-16031socket.ioGitHub IssueSocket IDs use predictable random numbers
CVE-2016-10544uWebSocketsnpm advisoryDenial of service due to large limit on message size
CVE-2016-10542NodeJS wsnpm advisoryDenial of service due to large limit on message size
Nonedraft-hixie-thewebsocketprotocol-76Writeup

<a name="conference_talks"></a>Conference Talks, Papers, Notable Blog Posts

2011

2012

2019

2021

<a name="common_websocket_weaknesses"></a>Common WebSocket Weaknesses

Unencrypted WebSockets

<!-- markdown-link-check-disable-next-line -->

Cross-Site WebSocket Hijacking (CSWSH)

Insecure Authentication Mechanism

Reverse Proxy Bypass using Upgrade Header

DOM-based WebSocket-URL poisoning

<a name="useful_blogs"></a>Useful Blog Posts & Resources

<a name="websocket_security_tools"></a>WebSocket Security Tools

Discovery, Fingerprinting, Vulnerability Detection

Fuzzing

Playgrounds

General Utilities & Tools

<a name="bug_bounty_writeups"></a>Bug Bounty Writeups

CSWSH bugs

Other bugs