cve.bz

CWE-942: Permissive Cross-domain Security Policy with Untrusted Domains, page 3

Filter

The product uses a web-client protection mechanism such as a Content Security Policy (CSP) or cross-domain policy file, but the policy includes untrusted domains with which the web client is allowed to communicate.

What the weakness is: CWE-942 at MITRE. OWASP Top 10: A02:2025 Security Misconfiguration

Ask an AI about CWE-942

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-942: Permissive Cross-domain Security Policy with Untrusted Domains and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/942.html and https://cve.bz/cve/cwe/942?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.1CVE-2025-41010EPSS 0.3%

    Incorrect Cross-Origin Resource Sharing (CORS) configuration in Hiberus Sintra. Cross-Origin Resource Sharing (CORS) allows browsers to make cross-domain requests in a controlled manner. This request has an “Origin” header that identifies …

  2. 9.5CVE-2020-36851EPSS 0.8%

    Rob--W cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets (SSRF). Because the proxy forwards requests and headers, an attacker can reach …

  3. 6.5CVE-2025-10529EPSS 0.3%

    Same-origin policy bypass in the Layout component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.

  4. 8.1CVE-2025-57755EPSS 0.3%

    claude-code-router is a powerful tool to route Claude Code requests to different models and customize any request. Due to improper Cross-Origin Resource Sharing (CORS) configuration, there is a risk that user API Keys or equivalent credent…

  5. 9.8CVE-2025-27909EPSS 0.2%

    IBM Concert Software 1.0.0 through 1.1.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.

  6. 6.5CVE-2025-25264EPSS 0.4%

    An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system.

  7. 5.1CVE-2025-41366EPSS 0.4%

    In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS). Exploiting this vulnerability requires authenticating to the device and executing certain commands that can on…

  8. 5.3CVE-2025-41363EPSS 0.3%

    In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS). Exploiting this vulnerability requires authenticating to the device and executing certain commands that can be…

  9. 2.3CVE-2025-4839EPSS 0.3%

    A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/cor…

  10. 2.3CVE-2025-4542EPSS 0.3%

    A vulnerability, which was classified as problematic, has been found in Freeebird Hotel 酒店管理系统 API up to 1.2. Affected by this issue is some unknown functionality of the file /src/main/java/cn/mafangui/hotel/tool/SessionInterceptor.java. T…

  11. 5.3CVE-2025-4515EPSS 0.4%

    A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. This affects an unknown part of the file settings.yaml. The manipulation of the argument allow_origins leads to permissive cross-domain policy…

  12. 7.5CVE-2025-25234EPSS 0.3%

    Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability. A malicious actor with network access to UAG may be able to bypass administrator-configured CORS restrictions to gain access to sensitive networks.

  13. 7.7CVE-2024-11071EPSS 0.2%

    Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solution(versions described below) which is developed and maintained by Cyberdigm may allow Cross-Site Request Forgery (CSRF) attack, whi…

  14. 8.7CVE-2025-30354EPSS 0.4%

    Bruno is an open source IDE for exploring and testing APIs. A bug in the assertion runtime caused assert expressions to run in Developer Mode, even if Safe Mode was selected. The bug resulted in the sandbox settings to be ignored for the p…

  15. 2.4CVE-2025-2865EPSS 0.2%

    SaTECH BCU, in its firmware version 2.1.3, could allow XSS attacks and other malicious resources to be stored on the web server. An attacker with some knowledge of the web application could send a malicious request to the victim users. Thr…

  16. 2.3CVE-2025-1083EPSS 0.3%

    A vulnerability classified as problematic was found in Mindskip xzs-mysql 学之思开源考试系统 3.9.0. Affected by this vulnerability is an unknown functionality of the component CORS Handler. The manipulation leads to permissive cross-domain policy w…

  17. 7.5CVE-2024-22348EPSS 0.4%

    IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not…

  18. 6.3CVE-2024-53276EPSS 0.6%

    Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. In 1.15.0 and earlier, an open CORS policy in app.js may allow an attacker to view the images of home-gallery when it is using the default sett…

  19. 8.7CVE-2024-49763EPSS 0.5%

    PlexRipper is a cross-platform media downloader for Plex. PlexRipper’s open CORS policy allows attackers to gain sensitive information from PlexRipper by getting the user to access the attacker’s domain. This allows an attacking website to…

  20. 5.3CVE-2024-45642EPSS 0.5%

    IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclo…

  21. 6.9CVE-2024-10315EPSS 0.3%

    In Gliffy Online an insecure configuration was discovered in versions before 4.14.0-6. Reported by Alpha Inferno PVT LTD.

  22. 5.3CVE-2024-6449EPSS 0.4%

    HyperView Geoportal Toolkit in versions lower than 8.5.0 does not restrict cross-domain requests when fetching remote content pointed by one of GET request parameters. An unauthenticated remote attacker can prepare links, which upon openin…

  23. 8.8CVE-2024-41657EPSS 0.8%

    Casdoor is a UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform. In Casdoor 1.577.0 and earlier, a logic vulnerability exists in the beego filter CorsFilter that allows any website to make cross domain requests t…

  24. 8.1CVE-2024-41659EPSS 0.6%

    memos is a privacy-first, lightweight note-taking service. A CORS misconfiguration exists in memos 0.20.1 and earlier where an arbitrary origin is reflected with Access-Control-Allow-Credentials set to true. This may allow an attacking web…

  25. 8.1CVE-2024-32862EPSS 0.4%

    Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains.

  26. 9.8CVE-2024-37131EPSS 0.5%

    SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious action…

  27. 6.5CVE-2023-37526EPSS 0.4%

    HCL DRYiCE Lucy (now AEX) is affected by a Cross Origin Resource Sharing (CORS) vulnerability. The mobile app is vulnerable to a CORS misconfiguration which could potentially allow unauthorized access to the application resources from any …

  28. 8.8CVE-2023-38125EPSS 1.3%

    Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Aut…

  29. 7.2CVE-2023-38122EPSS 1.9%

    Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ig…

  30. 6.5CVE-2024-23823EPSS 0.3%

    vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Learning and Multi-Party Computation. The vantage6 server has no restrictions on CORS settings. It should be possible for…

  31. 9.8CVE-2024-25124EPSS 0.7%

    Fiber is a web framework written in go. Prior to version 2.52.1, the CORS middleware allows for insecure configurations that could potentially expose the application to multiple CORS-related vulnerabilities. Specifically, it allows setting…

  32. 6.5CVE-2023-45213EPSS 0.4%

    A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could affect the correct functioning of the device.

  33. 9.8CVE-2023-50940EPSS 0.5%

    IBM PowerSC 1.3, 2.0, and 2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM …

  34. 4.3CVE-2024-21382EPSS 0.9%

    Microsoft Edge for Android Information Disclosure Vulnerability

  35. 8.8CVE-2023-46281EPSS 0.9%

    A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation…

  36. 9.1CVE-2023-25603EPSS 0.4%

    A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.3.0 - 6.3.4 and 6.4.0 - 6.4.1 allow an unauthorized attacker to carry out privileged actions and retrieve sensitive inf…

  37. 8.8CVE-2023-46098EPSS 0.6%

    A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). When accessing the Information Server from affected products, the products use an overly permissive CORS policy. This could allow an attacker to trick a legitima…

  38. 5.4CVE-2023-36829EPSS 0.7%

    Sentry is an error tracking and performance monitoring platform. Starting in version 23.6.0 and prior to version 23.6.2, the Sentry API incorrectly returns the `access-control-allow-credentials: true` HTTP header if the `Origin` request he…

  39. 7.5CVE-2023-2360EPSS 0.4%

    Sensitive information disclosure due to CORS misconfiguration. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.2.0-135.

  40. 7.5CVE-2023-23464EPSS 0.5%

    Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure.

  41. 6.5CVE-2022-34366EPSS 0.5%

    Dell SupportAssist for Home PCs (version 3.11.2 and prior) contain Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information.

  42. 6.1CVE-2023-23128EPSS 0.4%

    Connectwise Control 22.8.10013.8329 is vulnerable to Cross Origin Resource Sharing (CORS). The vendor's position is that two endpoints have Access-Control-Allow-Origin wildcarding to support product functionality, and that there is no risk…

  43. 7.5CVE-2022-47717EPSS 0.7%

    Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS).

  44. 9.8CVE-2022-26969EPSS 1.0%

    In Directus before 9.7.0, the default settings of CORS_ORIGIN and CORS_ENABLED are true.

  45. 9.8CVE-2022-31736EPSS 1.1%

    A malicious website could have learned the size of a cross-origin resource that supported Range requests. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.

  46. 9.8CVE-2021-27786EPSS 0.6%

    Cross-origin resource sharing (CORS) enables browsers to perform cross domain requests in a controlled manner. This request has an Origin header that identifies the domain that is making the initial request and defines the protocol between…

  47. 8.8CVE-2021-34435EPSS 0.6%

    In Eclipse Theia 0.3.9 to 1.8.1, the "mini-browser" extension allows a user to preview HTML files in an iframe inside the IDE. But with the way it is made it is possible for a previewed HTML file to trigger an RCE. This exploit only happen…

  48. 6.5CVE-2019-14860EPSS 1.2%

    It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker could use this lack of protection to conduct phishing attacks and further access unauthorized information.