CVE-2020-10591

An issue was discovered in Walmart Labs Concord before 1.44.0

published March 15, 2020

CVSS
—
EPSS
2%
Percentile
84.5
In the wild
Unconfirmed
What it is

An issue was discovered in Walmart Labs Concord before 1.44.0. CORS Access-Control-Allow-Origin headers have a potentially unsafe dependency on Origin headers, and are not configurable. This allows remote attackers to discover host information, nodes, API metadata, and references to usernames via api/v1/apikey.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02493 · 84.5th percentile
Published
2020-03-15T20:48Z
EPSS history
Timeline
  • 15 MAR 20:48Z
    An issue was discovered in Walmart Labs Concord before 1.44.0
    cvelistv5