README.md

CVE-2022-39841 Medusa's leaky WebSocket

For more information please read the blog post

Summary

A critical vulnerability in Medusa allows for information leakage, including plaintext credentials, by attaching to an unauthenticated WebSocket and waiting for a user to make a configuration change.