WebSocket Security Issues
High · Session
OWASP Top 10:2025 (current)
Not directly mapped to a Top 10:2025 category — see CWE / CVE below.
CWE
CWE-1385
CVE / class examples
- Search NVD/CVE for product-specific instances of this CWE
All refs
CWE-1385
Definition
Missing Origin checks, auth gaps, message injection.
Root cause
WebSocket treated as trusted channel.
Affected components
- Components in the “Session” class
- Application / API handlers
- Supporting libraries
Impact
CSWSH, data theft, chat abuse.
Severity
High · CVSS 7.4
Safe lab reproduction
WebSocket security labs
Detection methodology
Cross-origin WebSocket tests.
Evidence examples
- Lab reproduction notes: WebSocket security labs
- Request/response excerpts (redacted)
- Detection signal: Cross-origin WebSocket tests
Remediation
Validate Origin; authenticate WS; sanitize messages.
Secure coding examples
Use wss:// and session binding.
Related CYNARKS lessons & labs
Tools: burp
Practise related skills in Labs or deepen on Academy library.