Autobahn Python Security Bypass Vulnerability

Autobahn Python is a set of frameworks created in Python for the implementation of WebSocket and WAMP client-side and server-side . A security bypass vulnerability exists in Autobahn Python versions prior to 0.15.0. An attacker can exploit this vulnerability to perform unauthorized operations...

Autobahn|Python Origin Header Manipulation

Observation: Autobahn|Python incorrectly checks the Origin header when the 'allowedOrigins' value is set. This can allow third parties to execute legitimate requests for WAMP WebSocket requests against an Autobahn|Python/Crossbar.io server within another browser's context. Proof of Concept: The...