CVE-2019-14860

No fix known EPSS 1%CVSS 7.4

It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker could use this lack of protection to conduct phishing attacks and further access unauthorized information.