Medium · 5.3 CVE-2023-37401 EUVD-2023-41302GHSA-92r7-2x48-7rm2

IBM Aspera Faspex cross-origin resource sharing

Published Oct 9, 2025 · Updated Oct 9, 2025 · Assigned by ibm

Description

IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted.

Vendor	Product	Affected	Fixed
IBM	Aspera Faspex	5.0.0 – ≤ 5.0.13.1	—