HIGH 7.5
PYSEC-2024-260
상세
A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
PyPI / flask-cors
최초 영향 버전:
0 No fixed version published yet for flask-cors (pip). Pin to a known-safe version or switch to an alternative.