CVE-2020-7693

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-755

Affected software

No affected versions have been published.

Timeline

Published: Jul 9, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-76947.5This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Wh CVE-2020-76955.3Uvicorn before 0.11.7 is vulnerable to HTTP response splitting. CRLF sequences are not escaped in the value of HTTP headers. Attackers can e CVE-2020-76965.3This affects all versions of package react-native-fast-image. When an image with source={{uri: "...", headers: { host: "somehost.com", autho CVE-2020-76979.8This affects all versions of package mock2easy. a malicious user could inject commands through the _data variable: Affected Area require('..CVE-2020-76989.8This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sa CVE-2020-76999.8This affects the package express-fileupload before 1.1.8. If the parseNested option is enabled, sending a corrupt HTTP request can lead to d CVE-2020-77009.8All versions of phpjs are vulnerable to Prototype Pollution via parse_str.CVE-2020-77019.8madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue.CVE-2020-77029.8All versions of package templ8 are vulnerable to Prototype Pollution via the parse function.CVE-2020-77039.8All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function.CVE-2020-77049.8The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor.CVE-2020-77058.1This affects the package MintegralAdSDK from 0.0.0. The SDK distributed by the company contains malicious functionality that tracks any URL