cors-anywhere vulnerabilities

CVEs whose affected-version data names the cors-anywhere package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2020-36851Critical· 9.5

1y ago

Rob--W cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets (SSRF)

Rob--W cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets (SSRF). Because the proxy forwards requests and headers, an attacker can reac…

▾ MidnightRob--W / cors-anywhere · cors-anywhereEPSS 0.83%via NVD