Executive Summary

This vulnerability in Shopizer 3.2.7 occurs because the server's CORS implementation reflects the client-supplied Origin header directly into the Access-Control-Allow-Origin response header without validating it against a whitelist. Additionally, Access-Control-Allow-Credentials is set to true. This combination allows any malicious website to make authenticated cross-origin requests to the server and read sensitive data from the responses.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow attackers from any malicious origin to perform authenticated cross-origin requests and access sensitive information from the server. This can lead to unauthorized data disclosure, compromise of user accounts, and potentially full system compromise depending on the data exposed.

Useful 0 Not Useful 0