Home / Vulnerability Database / PHP : Unsafe cross-origin resource sharing (CORS) policy
PHP
PHP : Unsafe cross-origin resource sharing (CORS) policy
Classification
OWASP Top 10 2013
OWASP Top 10 2017
OWASP Top 10 2021
OWASP ASVS
Overview
Unsafe CORS configuration may lead to the data being compromised.
CORS (Cross Origin Resource Policy) is a mechanism defined in the HTML5 standard that enables JavaScript-code to work with data from another domain. CORS parameters must be defined in the HTTP header Access-Control-Allow-Origin.
CORS parameter defined not precisely enough may lead to the application data being compromised.
MEDIUM
DerScanner Severity Score
Do you want to fix PHP : Unsafe cross-origin resource sharing (CORS) policy in your application?
See also
PHP
PHP : Null salt
PHP
PHP : Empty password
PHP