Lucene search
MitreCVELIST:CVE-2018-14730HistorySep 21, 2018 - 5:00 p.m.
CVE-2018-14730
2018-09-2117:00:00
mitre
www.cve.org
1
0.006 Low
EPSS
Percentile
78.6%
An issue was discovered in Browserify-HMR. Attackers are able to steal developer’s code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1:3123/ connection from any origin.
Related
osv
osv
Missing Origin Validation in browserify-hmr
2020-09-01 21:18:20
github
github
Missing Origin Validation in browserify-hmr
2020-09-01 21:18:20
prion
prion
Code injection
2018-09-21 17:29:00
nvd
nvd
CVE-2018-14730
2018-09-21 17:29:04
nodejs
nodejs
Missing Origin Validation
2018-11-07 19:05:15
cve
cve
CVE-2018-14730
2018-09-21 17:29:04
veracode
veracode
Code Sniffing
2018-11-09 06:26:16