Skip to content
OpenAdvisories

Weakness (CWE)

CWE-346: Origin Validation Error

Class Draft

The product does not properly verify that the source of data or communication is valid.

Source: MITRE CWE-346

All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 8.7
    CVE-2026-45674 Public exploit

    Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

    Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. Versions 4.1.135.…

    netty netty netty netty Debian Ubuntu Maven
  • High 8.8
    CVE-2026-42559 Public exploit

    RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transport

    RMCP is an official Rust SDK for the Model Context Protocol. Prior to version 1.4.0, the rmcp crate's Streamable HTTP server transport (crates/rmcp/src/transport/streamable_http_server/) did not validate the incoming Host header. This allowed a malicious publ…

    modelcontextprotocol rust-sdk rmcp dynoxide-rs npm crates.io
  • High 7.5
    CVE-2026-33697 Public exploit

    CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys

    Cocos AI is a confidential computing system for AI. The current implementation of attested TLS (aTLS) in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2. This vulnerability is present in both the AMD SEV-SNP and Intel T…

    ultravioletrs cocos
  • High 7.4
    CVE-2026-27579 Public exploit

    CollabPlatform : CORS Misconfiguration Allows Arbitrary Origin With Credentials Leading to Authenticated Account Data Exposure

    CollabPlatform is a full-stack, real-time doc collaboration platform. In all versions of CollabPlatform, the Appwrite project used by the application is misconfigured to allow arbitrary origins in CORS responses while also permitting credentialed requests. An…

    karnop realtime-collaboration-platform
  • High 7.4
    CVE-2025-13947 Public exploit

    Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

    A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations orig…

    Red Hat The WebKitGTK Team Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu
  • High 8.2
    CVE-2025-59845 Public exploit

    Apollo Embedded Sandbox and Explorer vulnerable to CSRF via window.postMessage origin-validation bypass

    Apollo Studio Embeddable Explorer & Embeddable Sandbox are website embeddable software solutions from Apollo GraphQL. Prior to Apollo Sandbox version 2.7.2 and Apollo Explorer version 3.7.3, a cross-site request forgery (CSRF) vulnerability was identified. Th…

    apollographql embeddable-explorer @apollo/sandbox @apollo/explorer npm
  • High 8.8
    CVE-2024-45352 Public exploit

    Xiaomi smarthome application Webview has code execution vulnerability

    An code execution vulnerability exists in the Xiaomi smarthome application product. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code.

    Xiaomi Xiaomi smarthome application
  • High 8.8
    CVE-2024-23898 Public exploit EPSS 67%

    Cross-site WebSocket hijacking vulnerability in the Jenkins CLI

    Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijacking (CSWSH) vulnerability, allowing at…

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • High 8.3
    CVE-2023-30856 Public exploit

    eDEX-UI cross-site websocket hijacking vulnerability enables remote command execution

    eDEX-UI is a science fiction terminal emulator. Versions 2.2.8 and prior are vulnerable to cross-site websocket hijacking. When running eDEX-UI and browsing the web, a malicious website can connect to eDEX's internal terminal control websocket, and send arbit…

    GitSquared edex-ui
  • High 7.5
    CVE-2021-33959 Public exploit EPSS 15%

    Plex media server 1.21 and before is vulnerable to ddos reflection attack via plex service.

  • High 8.1
    CVE-2020-8819 Public exploit

    CardGate Payments plugin for WooCommerce does not validate request origin

    An issue was discovered in the CardGate Payments plugin through 3.1.15 for WooCommerce. Lack of origin authentication in the IPN callback processing function in cardgate/cardgate.php allows an attacker to remotely replace critical plugin settings (merchant ID…

    cardgate/woocommerce Packagist
  • High 8.8
    CVE-2015-4495 Exploited Public exploit EPSS 69%

    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remot…

    firefox pdf.js Debian Ubuntu
    KEV May 25, 2022