CWE-346: Origin Validation Error
The product does not properly verify that the source of data or communication is valid.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeInappropriate implementation in Network in Google Chrome on Android prior to 150.0.7871.47...6.5 Medium
- google chromeInsufficient policy enforcement in Canvas in Google Chrome prior to 150.0.7871.47 allowed a...6.5 Medium
- google chromeInappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote...6.5 Medium
- google chromeInappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote...6.5 Medium
- google chromeInappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.47...6.5 Medium
- google chromeInappropriate implementation in Extensions in Google Chrome on Android prior to 150.0.7871.47...6.5 Medium
- google chromeInsufficient policy enforcement in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote...6.5 Medium
- hkuds vibe-tradingVibe-Trading < 0.1.10 - Loopback Trust and Missing Host Validation Enable DNS-Rebinding Authentication Bypass and Remote Code Execution7.7 High
- apple ipados, macos, safari +5 more +7 moreA cross-origin issue was addressed with improved tracking of security origins. This issue is...6.5 Medium
- go-chi chigo-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For6.9 Medium
- pnpmpnpm: manifest identity spoof satisfies allowBuilds and runs attacker lifecycle7.5 High
- danny-avila librechatLibreChat: Missing Resource Parameter Validation in MCP OAuth Flow8.0 High
- siyuan-note siyuanSiYuan: Unauthenticated Admin API Access via Blanket chrome-extension:// Origin Allowlist9.2 Critical
- google chromeInappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.197 allowed a...4.7 Medium
- google chromeInappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.197 allowed a...6.5 Medium
- google chromeInappropriate implementation in DeviceBoundSessionCredentials in Google Chrome prior to 149.0...4.3 Medium
- nicolargo glancesGlances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack5.3 Medium
- apache nifiApache NiFi: Missing Validation for Proxy Host Headers6.3 Medium
- ankitects ankiAnki's local HTTP server does not sufficiently validate requests2.1 Low
- langchain-ai langsmith-sdkArbitrary server-side file read in LangSmith SDK TracingMiddleware5.0 Medium
- ankitects ankiAnki: User scripts in iframes have access to the internal Anki API6.5 Medium
- olo-dot-io uni-cliUni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests8.6 High
- dbt-labs dbt-mcpdbt-mcp: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens6.8 Medium
- tinacms @tinacms/app, tinacms +1 moreTinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover7.6 High
- craftcms cmsCraft CMS: Blind SSRF and Arbitrary JavaScript Injection via Host Header Poisoning in actionResourceJs6.9 Medium
github.com/0xERR0R/blockyGoBlocky DNSSEC validation bypass and validation-cache scope pollution8.6 Highkozounpm,@kozou/apinpm,@kozou/corenpm +1 more +3 moreKozou: Unauthenticated MCP HTTP server and bundled dev-stack hardening (DNS-rebinding, request-body limits, read-only reads, default network exposure)8.4 High- guzzleGuzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle5.8 Medium
- mervinpraison praisonai, praisonaiagents +1 morePraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools8.3 High
- zitadelZITADEL: Missing Token Audience Validation (`aud`) in JWT IdP Provider4.2 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Cross-origin postMessage confirmation bypass via action:submit7.1 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Networking: Cookies component9.1 Critical
- spring cloud gateway, vmware spring cloud gateway +1 moreSpring Cloud Gateway Server Forwards Headers from Untrusted Proxies in certain situations8.6 High
- angularAngular: URL Parser Differential in @angular/platform-server leading to SSRF Allowlist Bypass8.8 High
- webpack-dev-serverwebpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies5.3 Medium
- google mcp toolbox for databasesMCP Toolbox for Databases has an Origin Validation Error9.4 Critical
com.appsmith:serverMavenAppsmith: Configuration-dependent origin validation bypass in password reset and email verification link generation8.1 High- paloaltonetworks idira identity browser extension, cyberark software, a palo alto networks company identity browser extensions +1 moreIdira Identity Browser Extension: Unauthorized Application Interaction via Origin Validation Failure8.4 High
- google chromeInappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115...3.1 Low
- google chromeInsufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.115 allowed a...6.5 Medium
- hapijs wreck@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects6.5 Medium
- spring for graphql, vmware spring for graphql +1 moreCross-Site WebSocket Hijacking in Spring for GraphQL8.1 High
- xibosignage xibo-cmsXibo Vulnerable to Stored XSS and Iframe Sandbox Escape via Data Connector Script in DataSet7.6 High
- whiskeysockets baileys, @whiskeysockets/baileys +1 moreBaileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload9.3 Critical
- microsoft ldnsInsufficient verification that responses belong to a query8.2 High
- sap se business objects business intelligence platformEmail Spoofing vulnerability in SAP Business Objects Business Intelligence Platform4.3 Medium
- google chromeInappropriate implementation in Plugins in Google Chrome prior to 149.0.7827.103 allowed a remote...8.1 High
- netty, red hat build of apache camel - hawtio 4 +1 moreNetty's Default QUIC token handler accepts any client-supplied token7.5 High
- ninenines gungun HTTP/2 PUSH_PROMISE authority not validated against connection origin allows cross-origin cookie injection6.3 Medium
sanic-corsPyPIsanic-cors contains an improper regular expression in the try_match() function6.5 Medium- Show moreLoading…