CVE-2017-20146 — Improper access control in github.com/gorilla/handlers
Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the e…
Published: 2022-12-27 · CVSS: 9.8 · CVSS 3.1
Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7