Localhost dangers: CORS and DNS rebinding
ID: 83b7f9da-af4f-56b4-b89f-cf98a1413386
STIX ID: report--83b7f9da-af4f-56b4-b89f-cf98a1413386
Feed Name: GitHub Security Lab
Threat Score
The GitHub Security Lab post explains how improper CORS configuration and DNS rebinding can enable attackers to perform privileged actions or achieve remote code execution. It reviews insecure validation patterns (startsWith/endsWith/Contains), demonstrates real-world vulnerable projects (Cognita, Tamagui) including an exploit chain that uses arbitrary file write plus uvicorn --reload to achieve RCE, and recommends defensive measures such as exact origin matching, host header checks, and proper authentication.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.