Engine.IO before 4.0.0 allows attackers to cause a denial of service (resource consumption) via a POST request to the long polling transport.
{
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "4.0.0"
}
],
"source": [
"CPE_RANGE",
"REFERENCES"
],
"cpe": "cpe:2.3:a:socket:engine.io:*:*:*:*:*:*:*:*"
}{
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "4.0.0"
}
],
"source": "CPE_RANGE",
"cpe": "cpe:2.3:a:socket:engine.io:*:*:*:*:*:*:*:*"
}