Lucene search
+L

1 matches found

OSV
OSV
added 2025/03/20 10:15 a.m.7 views

UBUNTU-CVE-2024-6839

corydolphin/flask-cors version 4.0.1 contains an improper regex path matching vulnerability. The plugin prioritizes longer regex patterns over more specific ones when matching paths, which can lead to less restrictive CORS policies being applied to sensitive endpoints. This mismatch in regex...

5.3CVSS6.8AI score0.00652EPSS
SaveExploits1References4
Rows per page
Query Builder