← Volver a CVEs
CVE-2023-7078
HIGH7.5
Descripcion
Sending specially crafted HTTP requests to Miniflare's server could result in arbitrary HTTP and WebSocket requests being sent from the server. If Miniflare was configured to listen on external network interfaces (as was the default in wrangler until 3.19.0), an attacker on the local network could access other local servers.
Detalles CVE
Puntuacion CVSS v3.17.5
SeveridadHIGH
Vector CVSSCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
Vector de ataqueADJACENT_NETWORK
ComplejidadHIGH
Privilegios requeridosNONE
Interaccion usuarioREQUIRED
Publicado12/29/2023
Ultima modificacion11/21/2024
Fuentenvd
Avistamientos honeypot0
Productos afectados
cloudflare:miniflare
Debilidades (CWE)
CWE-918CWE-918
Referencias
https://github.com/cloudflare/workers-sdk/pull/4532(cna@cloudflare.com)
https://github.com/cloudflare/workers-sdk/security/advisories/GHSA-fwvg-2739-22v7(cna@cloudflare.com)
https://github.com/cloudflare/workers-sdk/pull/4532(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/cloudflare/workers-sdk/security/advisories/GHSA-fwvg-2739-22v7(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.