Lucene search
K

6 matches found

OSV
OSV
added 2024/01/03 9:26 p.m.21 views

GHSA-F8MP-X433-5WPF Arbitrary remote code execution within `wrangler dev` Workers sandbox

Impact The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run...

9.3CVSS8.3AI score0.00043EPSS
Exploits0References11
Veracode
Veracode
added 2024/01/02 12:12 p.m.19 views

Remote Code Execution

wrangler is vulnerable to Remote Code Execution. The vulnerability is caused due to V8 inspector intentionally allowing arbitrary code execution within Workers sandbox for debugging purpose. The wrangler dev server starts an inspector listening on all network interfaces. This allows an attacker t...

8.5CVSS8.6AI score0.00043EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2023/12/29 12:15 p.m.15 views

CVE-2023-7080

The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run arbitrary cod...

8CVSS8.3AI score
Exploits0References5
NVD
NVD
added 2023/12/29 12:15 p.m.10 views

CVE-2023-7080

The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run arbitrary cod...

8.5CVSS0.00043EPSS
Exploits0References5
Prion
Prion
added 2023/12/29 12:15 p.m.16 views

Design/Logic Flaw

The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run arbitrary cod...

5.4CVSS8.2AI score0.00072EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2023/12/29 11:58 a.m.13 views

CVE-2023-7080 Arbitrary remote code execution within wrangler dev Workers sandbox

The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run arbitrary cod...

8.5CVSS8.5AI score0.00043EPSS
Exploits0References5
Rows per page
Query Builder