CVE-2024-11071 Improper Access Control In DestinyECM

Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solutionversions described below which is developed and maintained by Cyberdigm may allow Cross-Site Request Forgery CSRF attack, which probabilistically enables JSON Hijacking aka JavaScript...

Cyberdigm DestinyECM security vulnerability

Cyberdigm DestinyECM is a u200b application from Cyberdigm. A security vulnerability exists in Cyberdigm DestinyECM that stems from an overly lax cross-domain policy that could lead to a cross-site request forgery attack...

PT-2025-15184 · Unknown · Destinyecm

Name of the Vulnerable Software and Affected Versions: DestinyECM solution affected versions not specified Description: The issue is related to a Permissive Cross-domain Policy with Untrusted Domains vulnerability in the local API server of the DestinyECM solution. This vulnerability may allow...

CVE-2024-11071: Cross-Site Request Forgery (CSRF)

Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solutionversions described below which is developed and maintained by Cyberdigm may allow Cross-Site Request Forgery CSRF attack, which probabilistically enables JSON Hijacking aka JavaScript...