When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.
Published: 2025-09-22
CVSS: 5.4
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Download Exploit for CVE-2025-47910 here:
Use Tor Browser to access .onion links.
Check our team here:
https://wednesfieldacademy.com/exploit-227-cve-2024-54534/
https://wednesfieldacademy.com/exploit-687-cve-2025-21613/
https://wednesfieldacademy.com/exploit-309-cve-2023-24538/
