CVE-2026-6143CWE-346CWE-942

farion1231 cc-switch ProxyServer server.rs cross-domain policy

Medium · published April 13, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
9.8
In the wild
Unconfirmed
What it is

A security flaw has been discovered in farion1231 cc-switch up to 3.12.3. Affected by this issue is some unknown functionality of the file src-tauri/src/proxy/server.rs of the component ProxyServer. The manipulation results in permissive cross-domain policy with untrusted domains. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00204 · 9.8th percentile
Weaknesses
CWE-346 · Origin Validation Error; CWE-942 · Permissive Cross-domain Security Policy with Untrusted Domains
Published
2026-04-13T01:15Z
EPSS history
Timeline
  • 13 APR 01:15Z
    farion1231 cc-switch ProxyServer server.rs cross-domain policy
    cvelistv5