Security Advisory

CVE-2023-7078

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-12-29 11:53:06

Last updated 2024-08-26 20:31:04

Assigner cloudflare

State PUBLISHED

Description

Sending specially crafted HTTP requests to Miniflares server could result in arbitrary HTTP and WebSocket requests being sent from the server. If Miniflare was configured to listen on external network interfaces (as was the default in wrangler until 3.19.0), an attacker on the local network could access other local servers.

← Browse all CVEs View on cve.org ↗