IBM Aspera Faspex cross-origin resource sharing
IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted.
Exploitability
AV:N
AC:L
PR:N
UI:N
Scope
S:U
Impact
C:N
I:L
A:N
5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Other
CWE-942