Regular Expression without Anchors

Overview Affected versions of this package are vulnerable to Regular Expression without Anchors through the alloworiginpat checks in websocket.py, login.py. An attacker can bypass CORS, WebSocket origin checks, and login redirect validation by supplying an Origin or Referer value that matches the...

Information leakage vulnerability in FESCO's HR sharing service platform

Beijing Foreign Enterprise Human Resource Service Co., Ltd. is a company that provides human resource services to foreign representative offices in China, foreign financial institutions and economic organizations. An information leakage vulnerability exists in the FESCO human resources sharing...