I think I've found a severe bug in the WebSocket "notify" API. Basically, sending some specially cratfted messsges causes the server to drop the connection with all users (maybe because it crashes?).
This could be used by a bad actor to make a Denial Of Service (DOS) attack to this specific API, so I think is kind of severe.
How could I comunicate with this site's admin to offer him more details? I know there is a email addres in the information page, but I've had no luck sending mails to it before.
Bernd
2023-06-28 00:47:52 ⋅ 1y
No. 276573
[email protected], try once again.