Threats tagged 'brew-locust-cve-2024-6221'

CVE-2024-6221 is a high-severity vulnerability in the Locust product related to the flask-cors library version 4.0.1. It causes the Access-Control-Allow-Private-Network CORS header to be set to true by default without configuration options. This misconfiguration can expose private network resources to unauthorized external access, increasing the risk of data breaches and network intrusions. The vulnerability affects Locust versions from 2.2.1 up to but not including 2.31.4_1. A patch is available to address this issue.