deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-23355
Published: 2025-10-01
Description: NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and denial of service.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23355; https://nvidia.custhelp.com/app/answers/detail/a_id/5704; https://www.cve.org/CVERecord?id=CVE-2025-23355
CVE: CVE-2025-54811
Published: 2025-10-01
Description: OpenPLC_V3 has a vulnerability in the enipThread function that occurs due to the lack of a return value. This leads to a crash when the server loop ends and execution hits an illegal ud2 instruction. This issue can be triggered remotely without authentication by starting the same server multiple times or if the server exits unexpectedly. The vulnerability allows an attacker to cause a Denial of Service (DoS) against the PLC runtime, stopping any PC started remotely without authentication. This results in the PLC process crashing and halting all automation or control logic managed by OpenPLC.
CVSS Score: 7.1 (HIGH)
CWE: CWE-758
References: https://github.com/thiagoralves/OpenPLC_v3; https://www.cisa.gov/news-events/ics-advisories/icsa-25-273-05
CVE: CVE-2025-59951
Published: 2025-10-01
Description: Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The official Docker image  for Termix versions 1.5.0 and below, due to being configured with an Nginx reverse proxy, causes the backend to retrieve the proxy's IP instead of the client's IP when using the req.ip method. This results in isLocalhost always returning True. Consequently, the /ssh/db/host/internal endpoint can be accessed directly without login or authentication. This endpoint records the system's stored SSH host information, including addresses, usernames, and passwords, posing an extremely high security risk. Users who use the official Termix docker image, build their own image using the official dockerfile, or utilize reverse proxy functionality will be affected by this vulnerability. This issue is fixed in version 1.6.0.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284, CWE-348, CWE-345
References: https://github.com/LukeGus/Termix/pull/221; https://github.com/LukeGus/Termix/security/advisories/GHSA-92cw-877q-6r94; https://github.com/LukeGus/Termix/security/advisories/GHSA-92cw-877q-6r94
CVE: CVE-2025-61587
Published: 2025-10-01
Description: Weblate is a web based localization tool. An open redirect exists in versions 5.13.2 and below via the redir parameter on .within.website when Weblate is configured with Anubis and REDIRECT_DOMAINS is not set. An attacker can craft a URL on the legitimate domain that redirects a victim to an attacker-controlled site. The redirect can also be used to initiate drive-by downloads (redirecting to a URL that serves a malicious file), increasing the risk to end users. This issue is fixed in version 5.13.3.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/WeblateOrg/docker/commit/76518342f65b8af8c2b7f7c5d37f84813c1253a1; https://github.com/WeblateOrg/weblate/commit/6b3d73a310279b5630bca8cbd9ea0be28bc67b63; https://github.com/WeblateOrg/weblate/commit/ec3b900f8a52c5c992d9e7014f09397e159ac381
CVE: CVE-2025-61582
Published: 2025-10-01
Description: TS3 Manager is modern web interface for maintaining Teamspeak3 servers. A Denial of Dervice vulnerability has been identified in versions 2.2.1 and earlier. The vulnerability permits an unauthenticated actor to crash the application through the submission of specially crafted Unicode input, requiring no prior authentication or privileges. The flaw manifests when Unicode tag characters are submitted to the Server field on the login page. The application fails to properly handle these characters during the ASCII conversion process, resulting in an unhandled exception that terminates the application within four to five seconds of submission. This issue is fixed in version 2.2.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/joni1802/ts3-manager/commit/3a069915f97a6f5dae1fe0b2e32aa11a69d83b5e; https://github.com/joni1802/ts3-manager/security/advisories/GHSA-4cq4-hp4f-8w7p
CVE: CVE-2025-61583
Published: 2025-10-01
Description: TS3 Manager is modern web interface for maintaining Teamspeak3 servers. A reflected cross-site scripting vulnerability has been identified in versions 2.2.1 and earlier. The vulnerability exists in the error handling mechanism of the login page, where malicious scripts embedded in server hostnames are executed in the victim's browser context without proper sanitization. This issue is fixed in version 2.2.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-80
References: https://github.com/joni1802/ts3-manager/commit/3a069915f97a6f5dae1fe0b2e32aa11a69d83b5e; https://github.com/joni1802/ts3-manager/security/advisories/GHSA-qw6j-37r6-m93g
CVE: CVE-2025-61588
Published: 2025-10-02
Description: RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture. In versions 2.0.2 and below of risc0-zkvm-platform, when the zkVM guest calls sys_read, the host is able to use a crafted response to write to an arbitrary memory location in the guest. This capability can be leveraged to execute arbitrary code within the guest. As sys_read is the mechanism by which input is requested by the guest, all guest programs built with the affected versions are vulnerable. This critically compromises the soundness guarantees of the guest program. Other affected packages include risc0-aggregation versions below 0.9,  risc0-zkos-v1compat below 2.1.0, risc0-zkvm versions between 3.0.0-rc.1 and 3.0.1. This issue has been fixed in the following versions: risc0-zkvm-platform 2.1.0, risc0-zkos-v1compat 2.1.0, risc0-aggregation 0.9, and risc0-zkvm 2.3.2 and 3.0.3.
CWE: CWE-94
References: https://github.com/risc0/risc0/commit/3f00e1fa0159599c1601e788021f2169d1f0a4dc; https://github.com/risc0/risc0/pull/3351; https://github.com/risc0/risc0/security/advisories/GHSA-jqq4-c7wq-36h7
CVE: CVE-2025-11020
Published: 2025-10-02
Description: An attacker can obtain server information using Path Traversal vulnerability to conduct SQL Injection, which possibly exploits Unrestricted Upload of File with Dangerous Type vulnerability in MarkAny SafePC Enterprise on Windows, Linux.This issue affects SafePC Enterprise: V7.0.* (V7.0.YYYY.MM.DD) before V7.0.1, and V5.*.*.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-89, CWE-434
References: https://www.markany.com/enterprisesecurity?utm_campaign=markany_sa&utm_source=google_pc&utm_medium=gsa_pc&utm_term=cybersecurity&utm_content=&gad_source=1&gad_campaignid=[PII_REDACTED]6&gbraid=0AAAAADOrb0lM8ZHyDytvnVwj9T--km9aM&gclid=Cj0KCQjwovPGBhDxARIsAFhgkwSh0F9hnsAoRTS8OnFI3KcF4_UMarYchq0uP5V1DiSQyKKVLdZPJNYaAiBuEALw_wcB
CVE: CVE-2025-11182
Published: 2025-10-02
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Download of Code Without Integrity Check vulnerability in GTONE ChangeFlow allows Path Traversal.This issue affects ChangeFlow: All versions to v9.0.1.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-494
References: http://www.gtone.co.kr/kr/application-lifecycle-management.php
CVE: CVE-2025-11221
Published: 2025-10-02
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path Traversal, Accessing Functionality Not Properly Constrained by ACLs.This issue affects ChangeFlow: from All versions through v9.0.1.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-434
References: http://www.gtone.co.kr/kr/application-lifecycle-management.php
CVE: CVE-2025-58775
Published: 2025-10-02
Description: KV STUDIO and VT5-WX15/WX12 contain a stack-based buffer overflow vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://jvn.jp/en/vu/JVNVU97069449/; https://www.keyence.com/kv_vulnerability2509301
CVE: CVE-2025-58776
Published: 2025-10-02
Description: KV Studio versions 12.23 and prior contain a stack-based buffer overflow vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://jvn.jp/en/vu/JVNVU97069449/; https://www.keyence.com/kv_vulnerability2509302
CVE: CVE-2025-58777
Published: 2025-10-02
Description: VT Studio versions 8.53 and prior contain an access of uninitialized pointer vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product.
CVSS Score: 7.8 (HIGH)
CWE: CWE-824
References: https://jvn.jp/en/vu/JVNVU97069449/; https://www.keyence.com/vt_vulnerability250930
CVE: CVE-2025-61690
Published: 2025-10-02
Description: KV STUDIO versions 12.23 and prior contain a buffer underflow vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product.
CVSS Score: 7.8 (HIGH)
CWE: CWE-124
References: https://jvn.jp/en/vu/JVNVU97069449/; https://www.keyence.com/kv_vulnerability2509302
CVE: CVE-2025-61691
Published: 2025-10-02
Description: VT STUDIO versions 8.53 and prior contain an out-of-bounds read vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://jvn.jp/en/vu/JVNVU97069449/; https://www.keyence.com/vt_vulnerability250930
CVE: CVE-2025-61692
Published: 2025-10-02
Description: VT STUDIO versions 8.53 and prior contain a use after free vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://jvn.jp/en/vu/JVNVU97069449/; https://www.keyence.com/vt_vulnerability250930
CVE: CVE-2025-9587
Published: 2025-10-02
Description: The CTL Behance Importer Lite WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
CVSS Score: 8.6 (HIGH)
References: https://wpscan.com/vulnerability/e497f8b3-d70b-4d81-b915-e78ea5c02863/
CVE: CVE-2025-9697
Published: 2025-10-02
Description: The Ajax WooSearch WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/38939152-e54e-4f8f-996b-592de195570d/; https://wpscan.com/vulnerability/38939152-e54e-4f8f-996b-592de195570d/
CVE: CVE-2025-40645
Published: 2025-10-02
Description: Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive information about customers by sending an HTTP GET request to “/api/reserva/web/clients” using the “phone” parameter.
CWE: CWE-200
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-viday
CVE: CVE-2025-40646
Published: 2025-10-02
Description: Stored Cross-Site Scripting (XSS) vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/create_job_submit.php”, using the “JobCreatedBy” parameter. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal their cookie session details.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-energy-crm-status-tracker
CVE: CVE-2025-54286
Published: 2025-10-02
Description: Cross-Site Request Forgery (CSRF) in LXD-UI in Canonical LXD versions >= 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTML form submissions exploiting client certificate authentication.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/canonical/lxd/security/advisories/GHSA-p8hw-rfjg-689h; https://github.com/canonical/lxd/security/advisories/GHSA-p8hw-rfjg-689h
CVE: CVE-2025-54287
Published: 2025-10-02
Description: Template Injection in instance snapshot creation component in Canonical LXD (>= 4.0) allows an attacker with instance configuration 
permissions to read arbitrary files on the host system via specially crafted snapshot pattern templates using the Pongo2 template engine.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1336
References: https://github.com/canonical/lxd/security/advisories/GHSA-w2hg-2v4p-vmh6; https://github.com/canonical/lxd/security/advisories/GHSA-w2hg-2v4p-vmh6
CVE: CVE-2025-54288
Published: 2025-10-02
Description: Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonate other containers and obtain their metadata, configuration, and device information via spoofed process names in the command line.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-290
References: https://github.com/canonical/lxd/security/advisories/GHSA-7232-97c6-j525; https://github.com/canonical/lxd/security/advisories/GHSA-7232-97c6-j525
CVE: CVE-2025-54289
Published: 2025-10-02
Description: Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format
CVSS Score: 8.1 (HIGH)
CWE: CWE-1385
References: https://github.com/canonical/lxd/security/advisories/GHSA-3g72-chj4-2228; https://github.com/canonical/lxd/security/advisories/GHSA-3g72-chj4-2228
CVE: CVE-2025-54290
Published: 2025-10-02
Description: Information disclosure in image export API in Canonical LXD before 6.5 and 5.21.4 on Linux allows network attackers to determine project existence without authentication via crafted requests using wildcard fingerprints.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/canonical/lxd/security/advisories/GHSA-p3x5-mvmp-5f35
CVE: CVE-2025-54291
Published: 2025-10-02
Description: Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://github.com/canonical/lxd/security/advisories/GHSA-xch9-h8qw-85c7
CVE: CVE-2025-54292
Published: 2025-10-02
Description: Path traversal in Canonical LXD LXD-UI versions before 6.5 and 5.21.4 on all platforms allows remote authenticated attackers to access or modify unintended resources via crafted resource names embedded in URL paths.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-22
References: https://github.com/canonical/lxd/security/advisories/GHSA-7425-4qpj-v4w3; https://github.com/canonical/lxd/security/advisories/GHSA-7425-4qpj-v4w3
CVE: CVE-2025-54468
Published: 2025-10-02
Description: A vulnerability has been identified within Rancher Manager whereby `Impersonate-Extra-*` headers are being sent to an external entity, for example `amazonaws.com`, via the `/meta/proxy` Rancher endpoint. These headers may contain identifiable and/or sensitive information e.g. email addresses.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-54468; https://github.com/rancher/rancher/security/advisories/GHSA-mjcp-rj3c-36fr
CVE: CVE-2025-61733
Published: 2025-10-02
Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-288
References: https://lists.apache.org/thread/8wmcffly6gp50nmfw8j4w3hlmv843yo0; http://www.openwall.com/lists/oss-security/2025/09/30/7
CVE: CVE-2025-61734
Published: 2025-10-02
Description: Files or Directories Accessible to External Parties vulnerability in Apache Kylin.
 You are fine as long as the Kylin's system and project admin access is well protected.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://lists.apache.org/thread/z705g7sn3g0bkchlqbo1hz1tyqorn4d2; http://www.openwall.com/lists/oss-security/2025/09/30/8
CVE: CVE-2025-61735
Published: 2025-10-02
Description: Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long as the Kylin's system and project admin access is well protected.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
CVSS Score: 7.3 (HIGH)
CWE: CWE-918
References: https://lists.apache.org/thread/yscobmx869zvprsykb94r24jtmb58ckh; http://www.openwall.com/lists/oss-security/2025/09/30/9
CVE: CVE-2025-40989
Published: 2025-10-02
Description: Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_message/add/xxx", affecting to "message" parameter via POST. This vulnerability could allow a remote attacker to send a specially crafted query to an authenticated user and steal his/her cookie session details.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-creativeitem-products
CVE: CVE-2025-40990
Published: 2025-10-02
Description: Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_bug/create/xxx", affecting to "title" and "description" parameters via POST. This vulnerability could allow a remote attacker to send a specially crafted query to an authenticated user and steal his/her cookie session details.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-creativeitem-products
CVE: CVE-2025-40991
Published: 2025-10-02
Description: Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_file/upload/xxxx", affecting to "description" parameter via POST. This vulnerability could allow a remote attacker to send a specially crafted query to an authenticated user and steal his/her cookie session details.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-creativeitem-products
CVE: CVE-2025-40992
Published: 2025-10-02
Description: Stored XSS vulnerability in Creativeitem Sociopro due to lack of proper validation of user inputs via the endpoint '/sociopro/profile/update_profile', affecting to 'name' parameter via POST. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal his/her cookie session details.
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-creativeitem-products
CVE: CVE-2025-54293
Published: 2025-10-02
Description: Path Traversal in the log file retrieval function in Canonical LXD 5.0 LTS on Linux allows authenticated remote attackers to read arbitrary files on the host system via crafted log file names or symbolic links.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/canonical/lxd/security/advisories/GHSA-472f-vmf2-pr3h; https://github.com/canonical/lxd/security/advisories/GHSA-472f-vmf2-pr3h
CVE: CVE-2024-58260
Published: 2025-10-02
Description: A vulnerability has been identified within Rancher Manager where a missing server-side validation on the `.username` field in Rancher can allow users with update permissions on other User resources to cause denial of access for targeted accounts.
CVSS Score: 7.6 (HIGH)
CWE: CWE-863
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-58260; https://github.com/rancher/rancher/security/advisories/GHSA-q82v-h4rq-5c86
CVE: CVE-2024-58267
Published: 2025-10-02
Description: A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI  tool is vulnerable to phishing attacks. The custom authentication protocol for SAML-based providers can be abused to steal Rancher’s authentication tokens.
CVSS Score: 8.0 (HIGH)
CWE: CWE-345
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-58267; https://github.com/rancher/rancher/security/advisories/GHSA-v3vj-5868-2ch2
CVE: CVE-2025-41064
Published: 2025-10-02
Description: Incorrect authentication vulnerability in OpenSIAC, which could allow an attacker to impersonate a person using Cl@ve as an authentication method.
CWE: CWE-287
References: https://www.incibe.es/en/incibe-cert/notices/aviso/incorrect-authentication-gtts-group-opensiac
CVE: CVE-2025-0642
Published: 2025-10-02
Description: Use of Hard-coded Credentials, Authorization Bypass Through User-Controlled Key vulnerability in PosCube Hardware Software and Consulting Ltd. Co. Assist allows Excavation, Authentication Bypass.This issue affects Assist: through 10.02.2025.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-639, CWE-798
References: https://www.usom.gov.tr/bildirim/tr-25-0309
CVE: CVE-2025-11239
Published: 2025-10-02
Description: Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the creator of a job can see all information including in- and output data (if present).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://www.knime.com/security/advisories
CVE: CVE-2025-11240
Published: 2025-10-02
Description: An open redirect vulnerability existed in KNIME Business Hub prior to version 1.16.0. An unauthenticated remote attacker could craft a link to a legitimate KNIME Business Hub installation which, when opened by the user, redirects the user to a page of the attackers choice. This might open the possibility for fishing or other similar attacks. The problem has been fixed in KNIME Business Hub 1.16.0.
CVSS Score: 7.2 (HIGH)
CWE: CWE-601
References: https://www.knime.com/security/advisories
CVE: CVE-2025-22862
Published: 2025-10-02
Description: An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7.0.6 and above; and FortiProxy 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, 7.2 all versions, 7.0.5 and above may allow an authenticated attacker to elevate their privileges via triggering a malicious Webhook action in the Automation Stitch component.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-288
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-385
CVE: CVE-2025-41010
Published: 2025-10-02
Description: Incorrect Cross-Origin Resource Sharing (CORS) configuration in Hiberus Sintra. Cross-Origin Resource Sharing (CORS) allows browsers to make cross-domain requests in a controlled manner. This request has an “Origin” header that identifies the domain making the initial request and defines the protocol between a browser and a server to see if the request is allowed. An attacker can exploit this and potentially perform privileged actions and access confidential information when Access-Control-Allow-Credentials is enabled.
CWE: CWE-942
References: https://www.incibe.es/en/incibe-cert/notices/aviso/cross-origin-resource-sharing-cors-hiberus-sintra