Lucene search
PRIOn knowledge basePRION:CVE-2018-14730HistorySep 21, 2018 - 5:29 p.m.
Code injection
2018-09-2117:29:00
PRIOn knowledge base
www.prio-n.com
4
0.006 Low
EPSS
Percentile
78.6%
An issue was discovered in Browserify-HMR. Attackers are able to steal developer’s code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1:3123/ connection from any origin.
Related
osv
osv
Missing Origin Validation in browserify-hmr
2020-09-01 21:18:20
github
github
Missing Origin Validation in browserify-hmr
2020-09-01 21:18:20
nvd
nvd
CVE-2018-14730
2018-09-21 17:29:04
nodejs
nodejs
Missing Origin Validation
2018-11-07 19:05:15
cvelist
cvelist
CVE-2018-14730
2018-09-21 17:00:00
cve
cve
CVE-2018-14730
2018-09-21 17:29:04
veracode
veracode
Code Sniffing
2018-11-09 06:26:16