Vulnerabilities in CORS 1.3.0