A bucket's cross-origin resource sharing policy may be configured with a wildcard or overly broad list of allowed origins, methods, or headers. Scripts served from an untrusted web origin can then read or write objects from within an authenticated user's browser session. This results in a loss of confidentiality or integrity of objects in the bucket.
Cross-Origin Requests are Permitted from Untrusted Origins
CCC.ObjStor.TH07
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.ObjStor.CP15 | Cross-Origin Resource Sharing | The service may be configured with a cross-origin resource sharing (CORS) policy on a bucket that determines which web origins a browser is permitted to request objects from. |
| CCC.Core.CP14 | API Access | The service exposes a port enabling external actors to interact programmatically with the service and its resources using HTTP protocol methods such as GET, POST, PUT, and DELETE. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.ObjStor.CN12 | Restrict Cross-Origin Resource Sharing to Approved Origins | Ensure that browsers may only make cross-origin requests to a bucket from web origins the organization has approved. No provider rejects such rules natively, so a policy-as-code check on bucket configuration satisfies these requirements. |