Cross-Site WebSocket Hijacking — Cross-site WebSocket hijacking abuses a service that accepts unauthorized WebSocket connections from another website. The victim’s browser supplies relevant authentication context. The attacker then interacts with functions that the service should restrict to legitimate connections. – Web Application Attacks

Added October 7, 2026

Cross-Site WebSocket Hijacking — Cross-site WebSocket hijacking abuses an authenticated browser’s connection to a WebSocket service through an untrusted website. Weak origin or authorization checks enable the interaction. Attackers exploit the connection to obtain information or perform unauthorized actions. – Application Attacks

Added October 7, 2026