CVE-2019-14860
syndesis: default CORS configuration is allow all
It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker could use this lack of protection to conduct phishing attacks and further access unauthorized information.
CVSS 3.1 · 6.5 Medium
EPSS 1.2%
KEV · Not listed
Vendors
Products