CVE-2020-16263 - Winston 1.5.4 devices have a CORS configuration that trusts arbitrary origins

CRITICAL

Winston 1.5.4 devices have a CORS configuration that trusts arbitrary origins

Published Oct 28, 2020

9.1

CRITICAL

CVSS 3.1

EPSS 1.21%

Winston 1.5.4 devices have a CORS configuration that trusts arbitrary origins. This allows requests to be made and viewed by arbitrary origins.

No remediation recorded yet.

Weaknesses (1)

CWE-668

Link	Providers	Tags
https://labs.bishopfox.com/advisories/winston-privacy-version-1.5.4		x_refsource_MISCExploitThird Party Advisory
https://winstonprivacy.com/		x_refsource_MISCProduct

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Oct 28, 2020

Updated Aug 4, 2024

Reserved Jul 31, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a