EPSS
Percentile
79.6%
It was discovered that the CORS Filter did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.
bugzilla.redhat.com/show_bug.cgi?id=1483823