CVE-2026-18825:详情

CVE-2026-18825

2026-09-28
13h17 +00:00
A07-Identif. and Authent. Fail
2026-09-30
21h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-346 Origin Validation Error
The product does not properly verify that the source of data or communication is valid.

参考资料