Description
A security flaw has been discovered in farion1231 cc-switch up to 3.12.3. Affected by this issue is some unknown functionality of the file src-tauri/src/proxy/server.rs of the component ProxyServer. The manipulation results in permissive cross-domain policy with untrusted domains. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| farion1231 | cc-switch | 3.12.0, 3.12.1, 3.12.2, 3.12.3 | — |
References
- VDB-357007 | farion1231 cc-switch ProxyServer server.rs cross-domain policy vdb-entry
- VDB-357007 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #796145 | github.com/farion1231 cc-switch v3.12.3 Origin Validation Error third-party-advisory
- https://github.com/farion1231/cc-switch/issues/1841 issue-tracking
- https://github.com/farion1231/cc-switch/pull/1915 issue-tracking patch
- https://github.com/farion1231/cc-switch/issues/1841#issue-4191294952 exploit issue-tracking
- https://github.com/farion1231/cc-switch/ product