CVE-2022-21667: soketi project soketi

csirt@kutim:~/threat-intel/cve/CVE-2022-21667

CVSS 7.5 · High EPSS 1,6%

Kerentanan Improper Handling of Exceptional Conditions pada soketi project soketi. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

soketi is an open-source WebSockets server. There is an unhandled case when reading POST requests which results in the server crashing if it could not read the body of a request. In the event that a POST request is sent to any endpoint of the server with an empty body, even unauthenticated with the Pusher Protocol, it will crash the server. All users that run the server are affected by this vulnerability and it's highly recommended to upgrade to the latest patch. There are no workarounds for this issue.

Rincian

Terbit di NVD: 10 Januari 2022
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-755: Improper Handling of Exceptional Conditions
EPSS (30 hari): 1,6% peluang dieksploitasi; lebih tinggi dari 75,4% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
soketi project	soketi	Semua versi sebelum 0.24.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/soketi/soketi/commit/4b12efef9c31117c36a0a0f1c3aa32114e86364b patch · advisory pihak ketiga
https://github.com/soketi/soketi/releases/tag/0.24.1 release notes · advisory pihak ketiga
https://github.com/soketi/soketi/security/advisories/GHSA-86ch-6w7v-v6xf advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.