Lucene search
GoogleOSV:GHSA-77Q4-M83Q-W76VHistorySep 01, 2020 - 9:18 p.m.
Missing Origin Validation in browserify-hmr
2020-09-0121:18:20
Google
osv.dev
5
0.006 Low
EPSS
Percentile
78.6%
Versions of browserify-hmr prior to 0.4.0 are missing origin validation on the websocket server.
This vulnerability allows a remote attacker to steal a developer’s source code because the origin of requests to the websocket server that is used for Hot Module Replacement (HMR) are not validated.
Recommendation
Upgrade to version 0.4.0 or later.
| CPE | Name | Operator | Version |
|---|---|---|---|
| browserify-hmr | lt | 0.4.0 |
References
Related
github
github
Missing Origin Validation in browserify-hmr
2020-09-01 21:18:20
cvelist
cvelist
CVE-2018-14730
2018-09-21 17:00:00
prion
prion
Code injection
2018-09-21 17:29:00
nvd
nvd
CVE-2018-14730
2018-09-21 17:29:04
nodejs
nodejs
Missing Origin Validation
2018-11-07 19:05:15
cve
cve
CVE-2018-14730
2018-09-21 17:29:04
veracode
veracode
Code Sniffing
2018-11-09 06:26:16