← Back

Browserify Hot Module Replacement Project

browserify-hot_module_replacement_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Browserify Hot Module Replacement
browserify-hot_module_replacement
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-14730
1Browserify Hot Module Replacement Project
1Browserify Hot Module Replacement
Nov 21, 2024
Sep 21, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in Browserify-HMR. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can re...Show more
An issue was discovered in Browserify-HMR. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1:3123/ connection from any origin.Show less