Flask-cors_project Flask-cors
4 CVEs affecting Flask-cors_project Flask-cors. Latest disclosed: 2025-03-20. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-6866 | High | 7.5 | 2025-03-20 | corydolphin/flask-cors version 4.01 contains a vulnerability where the request path matching is case-insensitive due to the use of the `try_match` function, wh… |
CVE-2020-25032 | High | 7.5 | 2020-08-31 | An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resou… |
CVE-2024-6844 | Medium | 5.3 | 2025-03-20 | A vulnerability in corydolphin/flask-cors version 4.0.1 allows for inconsistent CORS matching due to the handling of the '+' character in URL paths. The reques… |
CVE-2024-6839 | Medium | 5.3 | 2025-03-20 | corydolphin/flask-cors version 4.0.1 contains an improper regex path matching vulnerability. The plugin prioritizes longer regex patterns over more specific on… |