Security Advisory

CVE-2019-9580

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-03-09 04:00:00

Last updated 2024-08-04 21:54:45

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mechanism via a "null" origin value, potentially leading to XSS.

← Browse all CVEs View on cve.org ↗