Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2ww8-f9rj-2xg5

Опубликовано: 01 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Connectwise Control 22.8.10013.8329 is vulnerable to Cross Origin Resource Sharing (CORS).

Connectwise Control 22.8.10013.8329 is vulnerable to Cross Origin Resource Sharing (CORS).

EPSS

Процентиль: 51%
0.00283
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-942

Связанные уязвимости

CVSS3: 6.1
nvd
около 3 лет назад

Connectwise Control 22.8.10013.8329 is vulnerable to Cross Origin Resource Sharing (CORS). The vendor's position is that two endpoints have Access-Control-Allow-Origin wildcarding to support product functionality, and that there is no risk from this behavior. The vulnerability report is thus not valid.

EPSS

Процентиль: 51%
0.00283
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-942