Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fwmw-87x4-wjv5

Опубликовано: 02 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.

EPSS

Процентиль: 20%
0.00271
Низкий

7.5 High

CVSS3

Дефекты

CWE-942

Связанные уязвимости

CVSS3: 7.5
nvd
3 месяца назад

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.

EPSS

Процентиль: 20%
0.00271
Низкий

7.5 High

CVSS3

Дефекты

CWE-942