Threats tagged 'ghsa-35c6-2wx7-593f'

A vulnerability in the WebSocket backend allows multiple endpoints to connect using the same charging station session identifier. This leads to predictable session identifiers and enables session hijacking or shadowing, where a newer connection can displace the legitimate charging station session. The flaw may allow unauthorized authentication as other users or cause denial-of-service by overwhelming the backend with valid session requests.