system
Describe <CVE-2020-28481>.
user
What is <CVE-2020-28481>?
assistant
The package socket.io before 2.4.0 are vulnerable to Insecure Defaults due to CORS Misconfiguration. All domains are whitelisted by default..