Non évaluée

In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mechanism via a "null" origin value...

CVE-2019-9580 Première détection SecPulse Mar 9, 2019

Description d'origine La description telle que publiée par la source (souvent en anglais).

In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mechanism via a "null" origin value, potentially leading to XSS.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory github.com
advisory stackstorm.com

Faits clés

Gravité: Non évaluée
Publication: Mar 9, 2019
Première détection SecPulse: Mar 9, 2019

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50