Lucene search
PRIOn knowledge basePRION:CVE-2018-14732HistorySep 21, 2018 - 5:29 p.m.
Code injection
2018-09-2117:29:00
PRIOn knowledge base
www.prio-n.com
3
0.003 Low
EPSS
Percentile
68.5%
An issue was discovered in lib/Server.js in webpack-dev-server before 3.1.6. Attackers are able to steal developer’s code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1:8080/ connection from any origin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| webpack-dev-server | lt | 3.1.6 |
Related
cve
cve
CVE-2018-14732
2018-09-21 17:29:05
nodejs
nodejs
Missing Origin Validation
2018-11-07 17:10:22
veracode
veracode
Code Sniffing
2018-09-24 09:31:27
github
github
Missing Origin Validation in webpack-dev-server
2019-01-04 17:40:59
cvelist
cvelist
CVE-2018-14732
2018-09-21 17:00:00
nvd
nvd
CVE-2018-14732
2018-09-21 17:29:05
osv
osv
Missing Origin Validation in webpack-dev-server
2019-01-04 17:40:59