feast-dev Feast CORS Vulnerability in Agentscope Server

A Cross-Origin Resource Sharing (CORS) vulnerability has been identified in feast-dev/feast version 0.40.0. The issue arises because the CORS configuration on the agentscope server fails to properly limit access to only trusted origins. This flaw allows any external domain to send requests to the API, potentially bypassing security controls and exposing sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the API, allowing external domains to make requests that could bypass security measures and access sensitive information.