← Zuruck zu CVEs
CVE-2023-7078
HIGH7.5
Beschreibung
Sending specially crafted HTTP requests to Miniflare's server could result in arbitrary HTTP and WebSocket requests being sent from the server. If Miniflare was configured to listen on external network interfaces (as was the default in wrangler until 3.19.0), an attacker on the local network could access other local servers.
CVE Details
CVSS v3.1 Bewertung7.5
SchweregradHIGH
CVSS VektorCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
AngriffsvektorADJACENT_NETWORK
KomplexitatHIGH
Erforderliche PrivilegienNONE
BenutzerinteraktionREQUIRED
Veroffentlicht12/29/2023
Zuletzt geandert11/21/2024
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
cloudflare:miniflare
Schwachen (CWE)
CWE-918CWE-918
Referenzen
https://github.com/cloudflare/workers-sdk/pull/4532(cna@cloudflare.com)
https://github.com/cloudflare/workers-sdk/security/advisories/GHSA-fwvg-2739-22v7(cna@cloudflare.com)
https://github.com/cloudflare/workers-sdk/pull/4532(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/cloudflare/workers-sdk/security/advisories/GHSA-fwvg-2739-22v7(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.