← Back

CVE-2023-7079

nvd nist
Published: Dec 29, 2023Modified: Nov 21, 2024

JSON object

Loading...
5.7
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 2.1 / Impact: 3.6
Source: NVD

Description

Sending specially crafted HTTP requests and inspector messages to Wrangler's dev server could result in any file on the user's computer being accessible over the local network. An attacker that could trick any user on the local network into opening a malicious website could also read any file.

Affected (1)

Products: Cloudflare: Wrangler
Cloudflare
1 product
Wrangler
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Wrangler
From 3.9.0 to 3.19.0

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (6)

Source: cna@cloudflare.com
Patch
Source: cna@cloudflare.com
Patch
Source: cna@cloudflare.com
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.