Threats tagged 'ghsa-243r-jm6r-f6pp'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.4%	CVE-2026-74881jahlives openssl_encrypt · Permissive Cross-domain Security Policy with Untrusted Domains High7.1EPSS 0.4%2026-08-17CVE Database V5CVE-2026-74881 CVE-2026-74881 affects jahlives openssl_encrypt versions before 1.4.0, where the Cross-Origin Resource Sharing (CORS) policy is configured permissively with a wildcard allow_origins and allow_credentials set to true. This misconfiguration allows attackers to craft malicious websites that can make authenticated cross-origin requests to the API on behalf of users who visit these sites. EPSS 0.4%Vulnerability #ghsa-243r-jm6r-f6pp	CVE Database V5	2026-08-17

Page 1 of 1