Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-22cj-gf6g-gpgc

Опубликовано: 18 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

IBM Concert Software 1.0.0 through 1.1.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.

IBM Concert Software 1.0.0 through 1.1.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.

EPSS

Процентиль: 11%
0.00038
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-697
CWE-942

Связанные уязвимости

CVSS3: 5.4
nvd
3 месяца назад

IBM Concert Software 1.0.0 through 1.1.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.

EPSS

Процентиль: 11%
0.00038
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-697
CWE-942