CVE-2020-16230

Vulnerability CVE-2020-16230 affects HMS Networks Ewon Flexy and Cosy, all versions prior to 14.1. The issue is a permissive cross-domain policy using wildcards in CORS, allowing a local-privileged attacker to inject scripts into CORS configuration and sniff limited confidential information. Impa...

HMS Networks Ewon Flexy and Cosy

1. EXECUTIVE SUMMARY CVSS v3 2.3 ATTENTION: Low skill level to exploit Vendor: HMS Networks Equipment: Ewon Flexy and Cosy Vulnerability: Permissive Cross-domain Policy with Untrusted Domains 2. RISK EVALUATION Successful exploitation of this vulnerability could allow attackers to retrieve...