Vendor
A CORS misconfiguration in Rybbit versions prior to 2.7.0 allows unauthorized cross-origin requests to read sensitive data and perform authenticated actions.