Read the docs

Rob--W / cors-anywhere

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Rob--W / cors-anywhere records in CISA KEV

No Rob--W / cors-anywhere vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2020-18986 CVE-2020-36851 · GHSA-r3jv-xfgx-gj24

Rob--W cors-anywhere Misconfigured CORS Proxy Allows SSRF

Priority MEDIUM 44

Rob--W cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets (SSRF).

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.00828 Published 2025-09-25 No fix listed CWE-918
Open these records in search →