3 matches found
CVE-2025-50864
An Origin Validation Error in the elysia-cors library thru 1.3.0 allows attackers to bypass Cross-Origin Resource Sharing CORS restrictions. The library incorrectly validates the supplied origin by checking if it is a substring of any domain in the site's CORS policy, rather than performing an...
7.1AI score0.00474EPSS
SaveExploits0References4
CVE-2025-25234
Omnissa UAG contains a Cross-Origin Resource Sharing CORS bypass vulnerability. A malicious actor with network access to UAG may be able to bypass administrator-configured CORS restrictions to gain access to sensitive networks...
7.1CVSS0.00273EPSS
SaveExploits0References2
20