Threats tagged 'ghsa-26xr-j83g-4fmm'

This vulnerability involves the WebSocket backend using charging station identifiers to uniquely associate sessions but allowing multiple endpoints to connect with the same session identifier. This leads to predictable session identifiers and enables session hijacking or shadowing, where a newer connection can displace the legitimate charging station and receive backend commands. It may also allow unauthorized authentication or denial-of-service by overwhelming the backend with valid session requests.