CVEs-PoC/2020/CVE-2020-7693.md

### [CVE-2020-7693](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7693)
![](https://img.shields.io/static/v1?label=Product&message=sockjs&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%200.3.20%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Denial%20of%20Service%20(DoS)&color=brighgreen)

### Description

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20.

### POC

#### Reference
- https://github.com/andsnw/sockjs-dos-py
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-575448
- https://snyk.io/vuln/SNYK-JS-SOCKJS-575261

#### Github
- https://github.com/0xT11/CVE-POC
- https://github.com/ARPSyndicate/cvemon
- https://github.com/andsnw/sockjs-dos-py
- https://github.com/developer3000S/PoC-in-GitHub
- https://github.com/hectorgie/PoC-in-GitHub
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/soosmile/POC