Vulnerabilities in CORS 1.3.1