Skip to content
OpenAdvisories

Package · npm

cors-anywhere

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.5
    CVE-2020-36851

    Rob--W cors-anywhere Misconfigured CORS Proxy Allows SSRF

    Rob--W cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets (SSRF). Because the proxy forwards requests and headers, an attacker can reach internal-only endpoi…

    Rob--W / cors-anywhere Rob--W / cors-anywhere cors-anywhere npm