Skip to content

CWE-1385: Missing Origin Validation in WebSockets

The product uses a WebSocket, but it does not properly verify that the source of data or communication is valid.

Also known as Cross-Site WebSocket hijacking (CSWSH).

A kind of CWE-346 Origin Validation Error.

From the CWE List. © The MITRE Corporation.

Newest

gitpodAn issue was discovered in Gitpod versions prior to release-2022.11.2.16. There is a Cross-Site...CVE-2023-09578.2 HighMarch 3, 2023
gribbit project gribbitlukehutch Gribbit HttpRequestHandler.java messageReceived missing origin validation in websocketsCVE-2014-1250715.5 MediumJanuary 9, 2023