Home / Vulnerability Database / Go : Unsafe cross-origin resource sharing (CORS) policy
Go
Go : Unsafe cross-origin resource sharing (CORS) policy
Classification
OWASP Top 10 2013
OWASP Top 10 2017
OWASP Top 10 2021
OWASP ASVS
Overview
Insecure CORS configuration may lead to the data being compromised.
CORS (Cross Origin Resource Policy) is a defined in the HTML5 standard mechanism that enables JavaScript code to work with data from another domain. CORS parameters must be defined in the Access-Control-Allow-Origin HTTP header.
CORS parameter that was defined not precisely enough may lead to the application data being compromised.
MEDIUM
DerScanner Severity Score
Do you want to fix Go : Unsafe cross-origin resource sharing (CORS) policy in your application?
See also
Go
Go : Undocumented feature: special account
Go
Go : Nil salt
Go