| Package | Affected versions | Patched versions |
|---|---|---|
| unifi protect | < 1.20.0 | 1.20.0 |
A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1.19.2 and earlier allows a malicious actor who has convinced a privileged user to access a URL with malicious code to take over said user’s account.This vulnerability is fixed in UniFi Protect application Version 1.20.0 and later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free