5 matches found
[SECURITY] Fedora 43 Update: perl-HTTP-Tiny-0.094-1.fc43
This is a very simple HTTP/1.1 client, designed for doing simple GET requests without the overhead of a large framework like LWP::UserAgent. It is more correct and more complete than HTTP::Lite. It supports proxies currently only non-authenticating ones and redirection. It also correctly resumes...
CVE-2020-12480
In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be parsed...
EUVD-2022-7578
Malicious code in bioql PyPI...
CVE-2022-4147
CVE-2022-4147 affects the Quarkus CORS filter. The issue allows simple GET/POST requests with an invalid Origin to proceed, potentially enabling cross-origin abuse. The description in multiple sources notes that such requests (e.g., XMLHttpRequest-based) can bypass origin checks when the request ...
CVE-2022-4147
A vulnerability was found in Quarkus. The Quarkus CORS filter allows simple GET and POST requests with an invalid Origin to proceed. Simple GET or POST requests made with XMLHttpRequest have no event listeners registered on the object returned by the XMLHttpRequest upload property, and have no...