Skip to content
OpenAdvisories

Weakness (CWE)

CWE-346: Origin Validation Error

Class Draft

The product does not properly verify that the source of data or communication is valid.

Source: MITRE CWE-346

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-34291 Exploited Public exploit EPSS 93%

    Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE

    Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie c…

    Langflow Langflow langflow PyPI
    KEV May 21, 2026
  • High 8.8
    CVE-2015-4495 Exploited Public exploit EPSS 69%

    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remot…

    firefox pdf.js Debian Ubuntu
    KEV May 25, 2022