Lucene search
+L

5 matches found

OSV
OSV
•added 2023/04/13 9:17 p.m.•23 views

USN-6019-1 python-flask-cors vulnerability

It was discovered that Flask-CORS did not properly escape paths before evaluating resource rules. An attacker could possibly use this to expose sensitive information...

7.5CVSS7.2AI score0.04017EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2023/04/13 9:17 p.m.•58 views

USN-6019-1: Flask-CORS vulnerability

It was discovered that Flask-CORS did not properly escape paths before evaluating resource rules. An attacker could possibly use this to expose sensitive information...

7.5CVSS8AI score0.04017EPSS
SaveExploits0
Veracode
Veracode
•added 2019/11/15 3:08 a.m.•27 views

Directory Traversal

rack-cors is vulnerable to directory traversal. The vulnerability exists as it does not escape nor resolve the path before evaluating the resource rules, allowing access to files outside the /public folder...

5.3CVSS3.6AI score0.02462EPSS
SaveExploits0References6Affected Software3
Prion
Prion
•added 2015/07/03 2:00 a.m.•24 views

Design/Logic Flaw

Apple OS X before 10.10.4 does not properly consider custom resource rules during app signature verification, which allows attackers to bypass intended launch restrictions via a modified app...

5CVSS6.3AI score0.01502EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/07/03 12:00 a.m.•6 views

CVE-2015-3714: Undefined Security Weakness

Apple OS X before 10.10.4 does not properly consider custom resource rules during app signature verification, which allows attackers to bypass intended launch restrictions via a modified app...

5CVSS5.8AI score0.01502EPSS
SaveExploits0References2
Rows per page
Query Builder