Vulnerabilities > CVE-2023-38504 - Unspecified vulnerability in Sailsjs Sails

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

sailsjs

NVD

Published: 2023-07-27

Updated: 2023-08-03

Summary

Sails is a realtime MVC Framework for Node.js. In Sails apps prior to version 1.5.7,, an attacker can send a virtual request that will cause the node process to crash. This behavior was fixed in Sails v1.5.7. As a workaround, disable the sockets hook and remove the `sails.io.js` client.

Vulnerable Configurations

Part	Description	Count
Application	Sailsjs Sailsjs Sails - Sailsjs Sails 0.0.0 Sailsjs Sails 0.0.0-1 Sailsjs Sails 0.0.0-2 Sailsjs Sails 0.1.5 Sailsjs Sails 0.1.5-1 Sailsjs Sails 0.1.6-0 Sailsjs Sails 0.2.0 Sailsjs Sails 0.2.1 Sailsjs Sails 0.3.0 Sailsjs Sails 0.4.0 Sailsjs Sails 0.4.1 Sailsjs Sails 0.4.2 Sailsjs Sails 0.4.3 Sailsjs Sails 0.4.4 Sailsjs Sails 0.4.5 Sailsjs Sails 0.4.6 Sailsjs Sails 0.4.7 Sailsjs Sails 0.5.0 Sailsjs Sails 0.5.1 Sailsjs Sails 0.5.2 Sailsjs Sails 0.6.0 Sailsjs Sails 0.6.1 Sailsjs Sails 0.7.0 Sailsjs Sails 0.7.0-1 Sailsjs Sails 0.7.0-2 Sailsjs Sails 0.7.0-3 Sailsjs Sails 0.7.0-4 Sailsjs Sails 0.7.0-5 Sailsjs Sails 0.7.0-6 Sailsjs Sails 0.7.0-7 Sailsjs Sails 0.7.0-8 Sailsjs Sails 0.7.1 Sailsjs Sails 0.7.1-0 Sailsjs Sails 0.7.2 Sailsjs Sails 0.7.3 Sailsjs Sails 0.7.4 Sailsjs Sails 0.7.4-1 Sailsjs Sails 0.7.5-0 Sailsjs Sails 0.7.6-0 Sailsjs Sails 0.7.7 Sailsjs Sails 0.7.7-0 Sailsjs Sails 0.7.8 Sailsjs Sails 0.7.9 Sailsjs Sails 0.8.0 Sailsjs Sails 0.8.1 Sailsjs Sails 0.8.2 Sailsjs Sails 0.8.3 Sailsjs Sails 0.8.4 Sailsjs Sails 0.8.5 Sailsjs Sails 0.8.6 Sailsjs Sails 0.8.7 Sailsjs Sails 0.8.9 Sailsjs Sails 0.8.71 Sailsjs Sails 0.8.72 Sailsjs Sails 0.8.73 Sailsjs Sails 0.8.74 Sailsjs Sails 0.8.75 Sailsjs Sails 0.8.76 Sailsjs Sails 0.8.77 Sailsjs Sails 0.8.78 Sailsjs Sails 0.8.79 Sailsjs Sails 0.8.80 Sailsjs Sails 0.8.81 Sailsjs Sails 0.8.82 Sailsjs Sails 0.8.83 Sailsjs Sails 0.8.84 Sailsjs Sails 0.8.85 Sailsjs Sails 0.8.86 Sailsjs Sails 0.8.87 Sailsjs Sails 0.8.88 Sailsjs Sails 0.8.89 Sailsjs Sails 0.8.89-1 Sailsjs Sails 0.8.91 Sailsjs Sails 0.8.92 Sailsjs Sails 0.8.93 Sailsjs Sails 0.8.94 Sailsjs Sails 0.8.892 Sailsjs Sails 0.8.894 Sailsjs Sails 0.8.895 Sailsjs Sails 0.9.0 Sailsjs Sails 0.9.1 Sailsjs Sails 0.9.2 Sailsjs Sails 0.9.3 Sailsjs Sails 0.9.4 Sailsjs Sails 0.9.5 Sailsjs Sails 0.9.6 Sailsjs Sails 0.9.7 Sailsjs Sails 0.9.8 Sailsjs Sails 0.9.9 Sailsjs Sails 0.9.10 Sailsjs Sails 0.9.11 Sailsjs Sails 0.9.12 Sailsjs Sails 0.9.13 Sailsjs Sails 0.9.15 Sailsjs Sails 0.9.16 Sailsjs Sails 0.9.17 Sailsjs Sails 0.10.0 Sailsjs Sails 0.10.00 Sailsjs Sails 0.10.01 Sailsjs Sails 0.10.1 Sailsjs Sails 0.10.2 Sailsjs Sails 0.10.3 Sailsjs Sails 0.10.4 Sailsjs Sails 0.10.5 Sailsjs Sails 0.11.0 Sailsjs Sails 0.11.1 Sailsjs Sails 0.11.2 Sailsjs Sails 0.11.3 Sailsjs Sails 0.11.4 Sailsjs Sails 0.11.5 Sailsjs Sails 0.11.6-0 Sailsjs Sails 0.11.6-1 Sailsjs Sails 0.11.7-0 Sailsjs Sails 0.12.0 Sailsjs Sails 0.12.1 Sailsjs Sails 0.12.2 Sailsjs Sails 0.12.2-0 Sailsjs Sails 0.12.3 Sailsjs Sails 0.12.4 Sailsjs Sails 0.12.5 Sailsjs Sails 0.12.6 Sailsjs Sails 0.12.07 Sailsjs Sails 0.12.7 Sailsjs Sails 0.12.8 Sailsjs Sails 0.12.9 Sailsjs Sails 0.12.10 Sailsjs Sails 0.12.10-0 Sailsjs Sails 0.12.10-1 Sailsjs Sails 0.12.11 Sailsjs Sails 0.12.11-0 Sailsjs Sails 0.12.11-1 Sailsjs Sails 0.12.12 Sailsjs Sails 0.12.12-1 Sailsjs Sails 0.12.12-2 Sailsjs Sails 0.12.12-3 Sailsjs Sails 0.12.13 Sailsjs Sails 0.12.14 Sailsjs Sails 0.12.14- Sailsjs Sails 1.0.0 Sailsjs Sails 1.0.0-3 Sailsjs Sails 1.0.0-5 Sailsjs Sails 1.0.0-6 Sailsjs Sails 1.0.0-7 Sailsjs Sails 1.0.0-8 Sailsjs Sails 1.0.0-9 Sailsjs Sails 1.0.0-10 Sailsjs Sails 1.0.0-11 Sailsjs Sails 1.0.0-12 Sailsjs Sails 1.0.0-13 Sailsjs Sails 1.0.0-14 Sailsjs Sails 1.0.0-15 Sailsjs Sails 1.0.0-16 Sailsjs Sails 1.0.0-17 Sailsjs Sails 1.0.0-18 Sailsjs Sails 1.0.0-19 Sailsjs Sails 1.0.0-20 Sailsjs Sails 1.0.0-21 Sailsjs Sails 1.0.0-22 Sailsjs Sails 1.0.0-23 Sailsjs Sails 1.0.0-24 Sailsjs Sails 1.0.0-25 Sailsjs Sails 1.0.0-26 Sailsjs Sails 1.0.0-27 Sailsjs Sails 1.0.0-28 Sailsjs Sails 1.0.0-29 Sailsjs Sails 1.0.0-30 Sailsjs Sails 1.0.0-31 Sailsjs Sails 1.0.0-32 Sailsjs Sails 1.0.0-33 Sailsjs Sails 1.0.0-34 Sailsjs Sails 1.0.0-35 Sailsjs Sails 1.0.0-36 Sailsjs Sails 1.0.0-37 Sailsjs Sails 1.0.0-38 Sailsjs Sails 1.0.0-39 Sailsjs Sails 1.0.0-40 Sailsjs Sails 1.0.0-41 Sailsjs Sails 1.0.0-42 Sailsjs Sails 1.0.0-44 Sailsjs Sails 1.0.0-45 Sailsjs Sails 1.0.0-46 Sailsjs Sails 1.0.0-47 Sailsjs Sails 1.0.0-48 Sailsjs Sails 1.0.0-49 Sailsjs Sails 1.0.1 Sailsjs Sails 1.0.2 Sailsjs Sails 1.0.2-0 Sailsjs Sails 1.0.3-0 Sailsjs Sails 1.0.3-1 Sailsjs Sails 1.0.3-2 Sailsjs Sails 1.0.3-3 Sailsjs Sails 1.0.3-4 Sailsjs Sails 1.1.0 Sailsjs Sails 1.1.0-0 Sailsjs Sails 1.1.0-1 Sailsjs Sails 1.1.0-2 Sailsjs Sails 1.1.0-3 Sailsjs Sails 1.2.0-0 Sailsjs Sails 1.2.0-1 Sailsjs Sails 1.2.0-2 Sailsjs Sails 1.2.0-3 Sailsjs Sails 1.2.1 Sailsjs Sails 1.2.2 Sailsjs Sails 1.2.3 Sailsjs Sails 1.2.4 Sailsjs Sails 1.2.5 Sailsjs Sails 1.3.0 Sailsjs Sails 1.3.1 Sailsjs Sails 1.4.0 Sailsjs Sails 1.4.1 Sailsjs Sails 1.4.2 Sailsjs Sails 1.4.3 Sailsjs Sails 1.4.4 Sailsjs Sails 1.5.0 Sailsjs Sails 1.5.1 Sailsjs Sails 1.5.2 Sailsjs Sails 1.5.3 Sailsjs Sails 1.5.4 Sailsjs Sails 1.5.5 Sailsjs Sails 1.5.6	250

Summary

Vulnerable Configurations

References