CVE-2019-14860CWE-942

It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins

High · published November 8, 2019

CVSS v3.0
7.4
EPSS
1%
Percentile
67.0
In the wild
Unconfirmed
What it is

It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker could use this lack of protection to conduct phishing attacks and further access unauthorized information.

The record
Technical detail
CVSS v3.0
7.4 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01165 · 67.0th percentile
Weakness
CWE-942 · Permissive Cross-domain Security Policy with Untrusted Domains
Published
2019-11-08T14:45Z
EPSS history
Timeline
  • 08 NOV 14:45Z
    It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins
    cvelistv5