Threats tagged 'ghsa-365r-wjfh-hwpv'

A vulnerability in the WebSocket backend allows multiple endpoints to connect using the same charging station session identifier. This leads to predictable session identifiers and enables session hijacking or shadowing, where an attacker can displace the legitimate charging station connection and receive backend commands. The flaw may also allow unauthorized authentication or cause denial-of-service by overwhelming the backend with valid session requests.