Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-20744
HistoryJan 28, 2019 - 8:29 a.m.

Code injection

2019-01-2808:29:00
PRIOn knowledge base
www.prio-n.com
5

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.8%

The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems.

CPENameOperatorVersion
go_corsle1.3.0

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.8%

Related for PRION:CVE-2018-20744