Lucene search
Veracode Vulnerability DatabaseVERACODE:22214HistoryDec 20, 2019 - 4:00 a.m.
Cross-Origin Resource Sharing (CORS)
2019-12-2004:00:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.001
Percentile
48.2%
assembly-wsmaster-war uses an insecure cross-origin resource sharing (CORS) policy. The CORS configuration is enabled by default, which would allow a malicious web site to start an arbitrary Che workspace on behalf of the authenticated user in a manner of a CSRF attack.
Related
osv
osv
CVE-2019-17633
2019-12-19 17:15:12
githubexploit
githubexploit
Exploit for Cross-Site Request Forgery (CSRF) in Eclipse Che
2019-12-19 20:22:12
nvd
nvd
CVE-2019-17633
2019-12-19 17:15:12
checkpoint_advisories
checkpoint_advisories
Eclipse Che Cross Site Request Forgery (CVE-2019-17633)
2020-03-15 00:00:00
cvelist
cvelist
CVE-2019-17633
2019-12-19 17:05:12
prion
prion
Authentication flaw
2019-12-19 17:15:00
cve
cve
CVE-2019-17633
2019-12-19 17:15:12