{
  "title": "Having a permissive Cross-Origin Resource Sharing policy is security-sensitive",
  "type": "SECURITY_HOTSPOT",
  "code": {
    "impacts": {
      "SECURITY": "LOW"
    },
    "attribute": "COMPLETE"
  },
  "status": "ready",
  "tags": [
    "cwe"
  ],
  "defaultSeverity": "Minor",
  "ruleSpecification": "RSPEC-5122",
  "sqKey": "S5122",
  "scope": "Main",
  "securityStandards": {
    "CWE": [
      346,
      942
    ],
    "OWASP": [
      "A6"
    ],
    "OWASP Top 10 2021": [
      "A5",
      "A7"
    ],
    "PCI DSS 3.2": [
      "6.5.8"
    ],
    "PCI DSS 4.0": [
      "6.2.4"
    ],
    "ASVS 4.0": [
      "14.5.2",
      "14.5.3"
    ]
  }
}
