Unrated

In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mechanism via a "null" origin value...

CVE-2019-9580 First seen on SecPulse Mar 9, 2019

Original description The description as published by the source.

In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mechanism via a "null" origin value, potentially leading to XSS.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory github.com
advisory stackstorm.com

Key facts

Severity: Unrated
Published: Mar 9, 2019
First seen on SecPulse: Mar 9, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50