VULNERABILITY INTELLIGENCE

CVE-2023-7079

CVSS score6.4 MEDIUM
EPSS probability0.70%
CISA KEVNot currently listed
Published2023-12-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N

Description

Sending specially crafted HTTP requests and inspector messages to Wrangler's dev server could result in any file on the user's computer being accessible over the local network. An attacker that could trick any user on the local network into opening a malicious website could also read any file.

Weakness classification

  • cna@cloudflare.com: CWE-287
  • nvd@nist.gov: CWE-287

Primary references