VULNERABILITY INTELLIGENCE

CVE-2023-7078

CVSS score7.5 HIGH
EPSS probability0.55%
CISA KEVNot currently listed
Published2023-12-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

Description

Sending specially crafted HTTP requests to Miniflare's server could result in arbitrary HTTP and WebSocket requests being sent from the server. If Miniflare was configured to listen on external network interfaces (as was the default in wrangler until 3.19.0), an attacker on the local network could access other local servers.

Weakness classification

  • CWE-918: Server-Side Request Forgery (SSRF)

Primary references