159 matches found
CVE-2023-7080
The CVE-2023-7080 issue concerns the V8 inspector in Wrangler (wrangler dev) that could be reached on all network interfaces, enabling a local-network attacker to connect to the inspector and execute arbitrary code within the Workers sandbox. Root causes cited include the inspector server not val...
CVE-2023-7080 Arbitrary remote code execution within wrangler dev Workers sandbox
The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run arbitrary cod...
CVE-2023-7079 Arbitrary remote file read in Wrangler dev server
Sending specially crafted HTTP requests and inspector messages to Wrangler's dev server could result in any file on the user's computer being accessible over the local network. An attacker that could trick any user on the local network into opening a malicious website could also read any file...
PT-2023-32865 · Wrangler · Wrangler
Name of the Vulnerable Software and Affected Versions: wrangler versions prior to 3.19.0 wrangler versions prior to 2.20.2 Description: The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server...
Wrangler Code Issue Vulnerability
Cloudflare Wrangler is a repository from Cloudflare, Inc. A security vulnerability exists in Wrangler versions prior to 3.19.0, which stems from the fact that sending specially crafted HTTP requests may result in arbitrary HTTP and WebSocket requests being sent from the server, which could allow ...
Wrangler Authorization Issues Vulnerability
Cloudflare Wrangler is a repository from Cloudflare, Inc. A security vulnerability exists in Wrangler versions prior to 3.19.0, which stems from the fact that sending specially crafted HTTP requests and inspector messages could cause any file on a user's computer to be accessible over the local...
CVE-2023-7080: Improper Privilege Management
The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run arbitrary cod...
Cloudflare Wrangle Security Breach
Cloudflare Wrangler is a repository from Cloudflare, Inc. A security vulnerability exists in Cloudflare Wrangler versions prior to 3.19.0 that stems from the presence of an arbitrary code execution vulnerability that allows an attacker on a local network to connect to the inspector and run...
CVE-2023-7079: Improper Authentication
Sending specially crafted HTTP requests and inspector messages to Wrangler's dev server could result in any file on the user's computer being accessible over the local network. An attacker that could trick any user on the local network into opening a malicious website could also read any file...
CVE-2023-30779
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Jonathan Daggerhart Query Wrangler plugin = 1.5.51 versions...
CVE-2023-30779
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Jonathan Daggerhart Query Wrangler plugin = 1.5.51 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Jonathan Daggerhart Query Wrangler plugin = 1.5.51 versions...
CVE-2023-30779 WordPress Query Wrangler Plugin <= 1.5.51 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Jonathan Daggerhart Query Wrangler plugin = 1.5.51 versions...
CVE-2023-30779 WordPress Query Wrangler Plugin <= 1.5.51 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Jonathan Daggerhart Query Wrangler plugin = 1.5.51 versions...
CVE-2023-30779: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Jonathan Daggerhart Query Wrangler plugin = 1.5.51 versions...
PT-2023-22972 · Unknown · Jonathan Daggerhart Query Wrangler
Name of the Vulnerable Software and Affected Versions: Jonathan Daggerhart Query Wrangler plugin versions 1.5.51 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...
WordPress plugin Query Wrangler 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
Path Traversal
wrangler is vulnerable to Path Traversal. The vulnerability exists due to a lack of path sanitization in the generateResponse function of cli.js, which allows an attacker on the same network as the local development server to access the victim's files present outside of the development server...
managed-component-to-cloudflare-worker (1.5.2) potentially affected by CVE-2023-3348 via wrangler (2.0.23)
wrangler NPM version 2.0.23 is affected by a known vulnerability. The following packages have a transitive dependency on wrangler and may be impacted: - managed-component-to-cloudflare-worker 1.5.2 Source cves: CVE-2023-3348 Source advisory: OSV:GHSA-8C93-4HCH-XGXP...
GHSA-8C93-4HCH-XGXP Cloudflare Wrangler directory traversal vulnerability
Impact The Wrangler command line tool [email protected] or [email protected] was affected by a directory traversal vulnerability when running a local development server for Pages wrangler pages dev command. This vulnerability enabled an attacker in the same network as the victim to connect to the...