Description
corydolphin/flask-cors version 4.0.1 contains an improper regex path matching vulnerability. The plugin prioritizes longer regex patterns over more specific ones when matching paths, which can lead to less restrictive CORS policies being applied to sensitive endpoints. This mismatch in regex pattern priority allows unauthorized cross-origin access to sensitive data or functionality, potentially exposing confidential information and increasing the risk of unauthorized actions by malicious actors.
INFO
Published Date :
2025-03-20T10:09:42.595Z
Last Modified :
2025-03-20T18:35:47.526Z
Source :
@huntr_ai
AFFECTED PRODUCTS
The following products are affected by CVE-2024-6839 vulnerability.
No data.
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2024-6839.
