Threats tagged 'ghsa-h5wq-j227-wjwh'

This vulnerability involves a WebSocket backend that uses charging station identifiers to associate sessions but allows multiple endpoints to connect using the same session identifier. This leads to predictable session identifiers and enables session hijacking or shadowing, where a new connection can displace the legitimate charging station and receive backend commands. The flaw may allow unauthorized authentication as other users or cause denial-of-service by overwhelming the backend with valid session requests.