Connectwise Control 22.8.10013.8329 is vulnerable to Cross Origin Resource Sharing (CORS). The vendor's position is that two endpoints have Access-Control-Allow-Origin wildcarding to support product functionality, and that there is no risk from this behavior. The vulnerability report is thus not valid.
References
| Link | Resource |
|---|---|
| https://github.com/l00neyhacker/CVE-2023-23128 | Third Party Advisory |
| https://github.com/l00neyhacker/CVE-2023-23128 | Third Party Advisory |
Configurations
History
27 Mar 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-942 |
21 Nov 2024, 07:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/l00neyhacker/CVE-2023-23128 - Third Party Advisory |
07 Nov 2023, 04:07
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Connectwise Control 22.8.10013.8329 is vulnerable to Cross Origin Resource Sharing (CORS). The vendor's position is that two endpoints have Access-Control-Allow-Origin wildcarding to support product functionality, and that there is no risk from this behavior. The vulnerability report is thus not valid. |
Information
Published : 2023-02-01 14:15
Updated : 2025-03-27 15:15
NVD link : CVE-2023-23128
Mitre link : CVE-2023-23128
CVE.ORG link : CVE-2023-23128
JSON object : View
Products Affected
connectwise
- connectwise
CWE