Hiberus Sintra CORS Misconfiguration Vulnerability

A vulnerability exists in Hiberus Sintra due to incorrect Cross-Origin Resource Sharing (CORS) configuration. This flaw allows browsers to make cross-domain requests, which can be exploited by attackers to perform privileged actions and access confidential information, especially when the Access-Control-Allow-Credentials header is enabled.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information and the ability to perform privileged actions within the application.