CVE-2026-121821

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability has been identified in armeria versions 0.84.0 through 1.42.0, where any-origin CORS policies do not enforce configured path restrictions, allowing an attacker-controlled website visited by an authenticated victim to read sensitive responses from excluded paths when credentials are enabled and the victim's browser sends authentication credentials.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Referenced assets9 URLs

By indicator

Full discourse1 post

테크워처@TheHour235918h
1. 원문 기사 LINE Armeria 1.43.0 보안 취약점 수정 분석 https://pwn.watch/i/line-armeria-1-43-0-path-decorator-thrift-saml-fixes-nov-2026 2. 공식 보안 권고 — GitHub Security Advisories - CVE-2026-121823 — 경로 기반 인증 우회 https://github.com/line/armeria/security/advisories/GHSA-xqhm-4ph4-423v - CVE-2026-121824 — Thrift 메모리 DoS https://github.com/line/armeria/security/advisories/GHSA-2pfv-5p52-crjm - CVE-2026-121820 — SAML 압축 해제 DoS https://github.com/line/armeria/security/advisories/GHSA-6hgp-j5h7-33m3 - CVE-2026-121821 — CORS 경로 제한 문제 https://github.com/line/armeria/security/advisories/GHSA-386q-mrg6-jfj8 - CVE-2026-121822 — FileService 저장형 XSS https://github.com/line/armeria/security/advisories/GHSA-x9vf-hjgg-cq25 - CVE-2026-121819 — xDS 심볼릭 링크 경로 우회 https://github.com/line/armeria/security/advisories/GHSA-m64h-m6r5-6jrx 3. 공식 릴리스 및 수정 코드 - Armeria 1.43.0 Release Notes https://armeria.dev/release-notes/1.43.0/ - GitHub 보안 수정 커밋 https://github.com/line/armeria/commit/e725eb8
0000034
2.2K followersView on X

Explore more

Back to dashboard