CVE-2021-4236
Assigner: Go
Published: 2022-12-27T21:13:45.711Z
State: PUBLISHED
title: Panic or authentication bypass in github.com/ecnepsnai/web
descriptions: value: Web Sockets do not execute any AuthenticateMethod methods which may be set, leading to a nil pointer dereference if the returned UserData pointer is assumed to be non-nil, or authentication bypass. This issue only affects WebSockets with an AuthenticateMethod hook. Request handlers that do not explicitly use WebSockets are not vulnerable.
affected: vendor: github.com/ecnepsnai/web
product: github.com/ecnepsnai/web
collectionURL: https://pkg.go.dev
packageName: github.com/ecnepsnai/web
versions: version: 1.4.0
lessThan: 1.5.2
status: affected
versionType: semver
programRoutines: Server.socketHandler
Server.Socket
defaultStatus: unaffected
problemTypes: descriptions: description: CWE-400: Uncontrolled Resource Consumption