PT-2020-16441

Name of the Vulnerable Software and Affected Versions Damstra Smart Asset version 2020.7 Description An issue was discovered in the API/api/Version endpoint, where cross-origin resource sharing trusts random origins by accepting the arbitrary 'Origin' header, such as Origin: example.com, and...

CVE-2018-20744

The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems...