corydolphin

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

corydolphin records in CISA KEV

No corydolphin vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Flask-cors · all components

TI-2024-05769 CVE-2024-6221 · GHSA-hxwh-jpp2-84pm

HIGH 66

A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00718 Published 2024-08-18 Fixed in 5.0.0, 4.0.2 CWE-284

TI-2024-01562 CVE-2024-1681 · GHSA-84pr-m4jr-85g5

MEDIUM 63

corydolphin/flask-cors is vulnerable to log injection when the log level is set to debug.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00574 Published 2024-04-19 Fixed in 4.0.1 CWE-117