CVE-2018-20744
EUVD-2022-326728.01.2019, 08:29
The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| go_cors_project | go_cors | 𝑥 ≤ 1.3.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References