webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser

🗓️ 04 Sep 2025 05:10:20Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 2 Views

Webpack dev server users may have their source code stolen when visiting a malicious site in non Chromium browsers.

Reporter	Title	Published	Views	Family All 25
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses webpack-dev-server - 4.15.2 which is vulnerable to CVE-2025-30360.	29 Dec 202513:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Log Source Management app for IBM QRadar SIEM includes components with known vulnerabilities	15 Aug 202514:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition is vulnerable to Exposed Dangerous Method or Function, Origin Validation Error due to webpack-dev-server	17 Dec 202510:46	–	ibm
IBM Security Bulletins	Security Bulletin: Source Code Exposure Vulnerability in webpack-dev-server (Fixed in Version 5.2.1) affects watsonx.data	4 Mar 202615:30	–	ibm
Chainguard	CVE-2025-30360 vulnerabilities	2 Jul 202501:16	–	cgr
Circl	CVE-2025-30360	3 Jun 202515:55	–	circl
CNNVD	webpack-dev-server 访问控制错误漏洞	3 Jun 202500:00	–	cnnvd
CVE	CVE-2025-30360	3 Jun 202517:41	–	cve
Cvelist	CVE-2025-30360 webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser	3 Jun 202517:41	–	cvelist
EUVD	EUVD-2025-16764	3 Oct 202520:07	–	euvd

04 Sep 2025 05:10Current

7High risk

Vulners AI Score7

CVSS 3.16.5

EPSS0.00039

SSVC

Webpack dev server source code malicious site non Chromium browsers