Lucene search
Veracode Vulnerability DatabaseVERACODE:7520HistorySep 24, 2018 - 6:51 a.m.
Information Disclosure
2018-09-2406:51:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.003 Low
EPSS
Percentile
66.3%
parcel-bundler is vulnerable to information disclosure. The library does not validate the origin of the requests, allowing a malicious user to send a HMR (Hot Module Replacement) request to the application to gain access to the source code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| parcel-bundler | le | 1.10.0-beta.1 |
Related
osv
osv
Missing Origin Validation in parcel-bundler
2018-10-30 20:36:53
cve
cve
CVE-2018-14731
2018-09-21 17:29:05
cvelist
cvelist
CVE-2018-14731
2018-09-21 17:00:00
nodejs
nodejs
Missing Origin Validation
2018-11-02 03:41:24
prion
prion
Code injection
2018-09-21 17:29:00
nvd
nvd
CVE-2018-14731
2018-09-21 17:29:05
github
github
Missing Origin Validation in parcel-bundler
2018-10-30 20:36:53