medium4.2
CVE-2024-23823
vantage6's CORS settings overly permissive
Impact
### Impact The vantage6 server has no restrictions on CORS settings. It should be possible for people to set the allowed origins of the server. The impact is limited because v6 does not use session cookies ### Patches No ### Workarounds No
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | vantage6 | <= 4.2.2 | 4.3.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vantage6 | Vantage6 | before 4.2.1 |