Vulnerability Details CVE-2021-4236
Web Sockets do not execute any AuthenticateMethod methods which may be set, leading to a nil pointer dereference if the returned UserData pointer is assumed to be non-nil, or authentication bypass. This issue only affects WebSockets with an AuthenticateMethod hook. Request handlers that do not explicitly use WebSockets are not vulnerable.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 6.0%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2021-4236
-
cpe:2.3:a:web_project:web:1.4.0
-
cpe:2.3:a:web_project:web:1.5.0
-
cpe:2.3:a:web_project:web:1.5.1