2 matches found
CVE-2022-26969
In Directus before 9.7.0, the default settings of CORSORIGIN and CORSENABLED are true...
CVE-2022-26969: Permissive Cross-domain Policy with Untrusted Domains