漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
claude-code-router CORS. misconfiguration
Vulnerability Description
claude-code-router is a powerful tool to route Claude Code requests to different models and customize any request. Due to improper Cross-Origin Resource Sharing (CORS) configuration, there is a risk that user API Keys or equivalent credentials may be exposed to untrusted domains. Attackers could exploit this misconfiguration to steal credentials, abuse accounts, exhaust quotas, or access sensitive data. The issue has been patched in v1.0.34.
CVSS Information
N/A
Vulnerability Type
信息暴露
Vulnerability Title
Claude Code Router 安全漏洞
Vulnerability Description
Claude Code Router是musi个人开发者的一个增强 Claude Code 的灵活性和可定制性的软件。 Claude Code Router 1.0.34之前版本存在安全漏洞,该漏洞源于跨资源共享配置不当,可能导致凭据泄露或敏感数据访问。
CVSS Information
N/A
Vulnerability Type
N/A