Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2017-20146HistoryDec 27, 2022 - 10:15 p.m.
CVE-2017-20146
2022-12-2722:15:11
Debian Security Bug Tracker
security-tracker.debian.org
5
cors handler
access-control-allow-origin
same origin policy
unix
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
54.8%
Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy.
Related
osv
osv
CVE-2017-20146
2022-12-27 22:15:11
Improper access control in github.com/gorilla/handlers
2021-04-14 20:04:52
nvd
nvd
CVE-2017-20146
2022-12-27 22:15:11
prion
prion
Design/Logic Flaw
2022-12-27 22:15:00
cvelist
cvelist
CVE-2017-20146 Improper access control in github.com/gorilla/handlers
2022-12-27 21:13:00
cve
cve
CVE-2017-20146
2022-12-27 22:15:11
ubuntucve
ubuntucve
CVE-2017-20146
2022-12-27 00:00:00
github
github
veracode
veracode
Authorization Bypass
2023-01-12 09:37:28
redhatcve
redhatcve
CVE-2017-20146
2023-01-04 20:35:12
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
54.8%
Related for DEBIANCVE:CVE-2017-20146