Lack of data validation In vantage6
Description
vantage6's CORS settings overly permissive
Impact
The vantage6 server has no restrictions on CORS settings. It should be possible for people to set the allowed origins of the server.
The impact is limited because v6 does not use session cookies
Patches
No
Workarounds
No
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 pypi | 4.3.0 |
Aliases
1. 2. 3. 4. 5.
References
1. 2.