https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 07:42:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-250459 EUVD-2026-250459 https://cve.radiocsirt.org/vuln/euvd-2026-250459 https://cve.radiocsirt.org/vuln/fkie_cve-2025-51605 <p>An issue was discovered in Shopizer 3.2.7. The server&#39;s CORS implementation reflects the client-supplied Origin header verbatim into Access-Control-Allow-Origin without any whitelist validation, while also enabling Access-Control-Allow-Credentials: true. This allows any malicious origin to make authenticated cross-origin requests and read sensitive responses.</p> <p>An issue was discovered in Shopizer 3.2.7. The server&#39;s CORS implementation reflects the client-supplied Origin header verbatim into Access-Control-Allow-Origin without any whitelist validation, while also enabling Access-Control-Allow-Credentials: true. This allows any malicious origin to make authenticated cross-origin requests and read sensitive responses.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-51605 https://cve.radiocsirt.org/vuln/ghsa-hw5g-vq3v-g5fv <p>An issue was discovered in Shopizer 3.2.7. The server&#39;s CORS implementation reflects the client-supplied Origin header verbatim into Access-Control-Allow-Origin without any whitelist validation, while also enabling Access-Control-Allow-Credentials: true. This allows any malicious origin to make authenticated cross-origin requests and read sensitive responses.</p> <p>An issue was discovered in Shopizer 3.2.7. The server&#39;s CORS implementation reflects the client-supplied Origin header verbatim into Access-Control-Allow-Origin without any whitelist validation, while also enabling Access-Control-Allow-Credentials: true. This allows any malicious origin to make authenticated cross-origin requests and read sensitive responses.</p> https://cve.radiocsirt.org/vuln/ghsa-hw5g-vq3v-g5fv