TI-2018-04900 CVE-2018-6651 · GHSA-g952-h9rv-wc2rIn the uncurl_ws_accept function in uncurl.c in uncurl before 0.07, as used in Parsec…Priority MEDIUM 43In the uncurl_ws_accept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140-3, insufficient Origin header validation (accepting an arbitrary substring match) for WebSocket API requests allows remote…CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02386 · Published 2018-02-05 · No fix listed CWE-352
