Логотип exploitDog
bind:CVE-2017-20146
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2017-20146

Количество 5

Количество 5

ubuntu логотип

CVE-2017-20146

около 3 лет назад

Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy.

CVSS3: 9.8
EPSS: Низкий
redhat логотип

CVE-2017-20146

около 3 лет назад

Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy.

CVSS3: 7
EPSS: Низкий
nvd логотип

CVE-2017-20146

около 3 лет назад

Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2017-20146

около 3 лет назад

Usage of the CORS handler may apply improper CORS headers, allowing th ...

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-jcr6-mmjj-pchw

около 3 лет назад

gorilla/handlers may allow requester to bypass expected behavior of the Same Origin Policy

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2017-20146

Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy.

CVSS3: 9.8
0%
Низкий
около 3 лет назад
redhat логотип
CVE-2017-20146

Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy.

CVSS3: 7
0%
Низкий
около 3 лет назад
nvd логотип
CVE-2017-20146

Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy.

CVSS3: 9.8
0%
Низкий
около 3 лет назад
debian логотип
CVE-2017-20146

Usage of the CORS handler may apply improper CORS headers, allowing th ...

CVSS3: 9.8
0%
Низкий
около 3 лет назад
github логотип
GHSA-jcr6-mmjj-pchw

gorilla/handlers may allow requester to bypass expected behavior of the Same Origin Policy

CVSS3: 9.8
0%
Низкий
около 3 лет назад

Уязвимостей на страницу