CVE-2025-47910Patch

LOWCVSS 5.4 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Referenced assets1 URL

By indicator

https://tinyurl.com/bdeskb2e

Full discourse1 post

Ferramentas Linux@Cezar_H_Linux243d
Patch
🚨 Critical update for #Fedora 42 users: node-exporter 1.10.2 patches multiple CVEs (CVE-2025-47910, 58189, etc.) - DoS, info leak, and bypass risks fixed. Read more: 👉 https://tinyurl.com/bdeskb2e #Security https://t.co/FCzQ8KUX73
Post summary
The tweet alerts Fedora 42 users to update node-exporter to version 1.10.2, which patches several CVEs including DoS, information‑leak, and bypass vulnerabilities.
0000064
1.3K followersView on X

Explore more

Back to dashboard