Skip to content

victorgesicht/Inconsistent-CORS-enforcement-.NET

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 
 
 

Repository files navigation

#CORS Misconfiguration Vulnerability Report

Overview

#Tools used: Burp Suite, Imgur, Overleaf,Request Minimizer ext. -burp

This repository documents a Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability identified during and independent security research. The vulnerability allows unauthorized cross-origin access to sensitive user data.

Status: No unauthorized access was performed and bug was submitted and patched

#Summary Issue Type: CORS Misconfiguration Impact: Unauthorized access to authenticated API responses Target: anonymized.com
Date Identified: 11th June 2025

About

This repository contains a sample bug report and POC for a CORS vuln. The goal is to demonstrate how improperly configured CORS can lead to serious security issues, including unauthorized data access and privilege escalation. The vulnerability has since been patched.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors