This vulnerability in farion1231 cc-switch (up to version 3.12.3) arises from a permissive cross-domain policy implemented in the ProxyServer component's source code (src-tauri/src/proxy/server.rs). The flaw allows untrusted domains to bypass cross-domain restrictions, potentially enabling unauthorized interactions or data access. The vulnerability is remotely exploitable and a public exploit has been released. The CVSS 4.0 base score is 5.3, indicating medium severity. No vendor advisory or patch information is currently available.

The vulnerability permits untrusted domains to bypass cross-domain security policies, which may lead to unauthorized access or manipulation of resources through the ProxyServer component. This could facilitate attacks that leverage cross-domain interactions, although the exact impact depends on the application's use of the ProxyServer. The presence of a public exploit increases the risk of exploitation, but no known widespread exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the ProxyServer component or implementing additional access controls to limit cross-domain interactions. Monitor for updates from the vendor regarding patches or official mitigations.