1 matches found
Nuxt dev server discloses project root and workspace UUID via the Chrome DevTools workspace endpoint
Impact When a Nuxt dev server is bound to a network-reachable interface for example nuxt dev --host for on-device testing, the default-enabled Chrome DevTools workspace endpoint GET /.well-known/appspecific/com.chrome.devtools.json returns the absolute project root workspace.root, i.e. rootDir an...
6.9CVSS5.9AI score0.00135EPSS
SaveExploits0References8Affected Software1
20