🌍 17 — CORS Misconfig

Easy Medium Hard
Easy Medium Hard
0/3 solved

🔐 Medium — Exploit wildcard origin CORS.

Access /api/user-data-medium from any origin.

Origin * allows any domain.