Lucene search

CVE-2024-25124

🗓️ 21 Feb 2024 21:09:15Reported by GoogleType

osv🔗 osv.dev👁 30 Views

Fiber framework CORS security vulnerability version 2.52.1

Reporter	Title	Published	Views	Family All 9
Vulnrichment	CVE-2024-25124 Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials	21 Feb 202421:01	–	vulnrichment
OSV	Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials	22 Feb 202418:25	–	osv
OSV	Insecure CORS Configuration allowing wildcard origin with credentials in github.com/gofiber/fiber/v2	20 May 202419:46	–	osv
CVE	CVE-2024-25124	21 Feb 202421:15	–	cve
Veracode	Permissive Cross-domain Policy With Untrusted Domains	22 Feb 202412:32	–	veracode
Github Security Blog	Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials	22 Feb 202418:25	–	github
Prion	Design/Logic Flaw	21 Feb 202421:15	–	prion
Cvelist	CVE-2024-25124 Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials	21 Feb 202421:01	–	cvelist
NVD	CVE-2024-25124	21 Feb 202421:15	–	nvd

Source	Link
github	www.github.com/gofiber/fiber/security/advisories/GHSA-fmg4-x8pw-hjhg
blog	www.blog.portswigger.net/2016/10/exploiting-cors-misconfigurations-for.html
saturncloud	www.saturncloud.io/blog/cors-cannot-use-wildcard-in-accesscontrolalloworigin-when-credentials-flag-is-true
github	www.github.com/gofiber/fiber/commit/f0cd3b44b086544a37886232d0530601f2406c23
codeql	www.codeql.github.com/codeql-query-help/javascript/js-cors-misconfiguration-for-credentials
developer	www.developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSNotSupportingCredentials
fetch	www.fetch.spec.whatwg.org/
github	www.github.com/gofiber/fiber/releases/tag/v2.52.1

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Feb 2024 21:15Current

9.2High risk

Vulners AI Score9.2

CVSS39.4

EPSS0.00255

SSVC