CVE-2023-7078 — Server-Side Request Forgery (SSRF) in Miniflare
Sending specially crafted HTTP requests to Miniflare's server could result in arbitrary HTTP and WebSocket requests being sent from the server. If Miniflare was configured to li…
Published: 2023-12-29 · CVSS: 7.5 · CVSS 3.1
Sending specially crafted HTTP requests to Miniflare's server could result in arbitrary HTTP and WebSocket requests being sent from the server. If Miniflare was configured to listen on external network interfaces (as was the default in wrangler until 3.19.0), an attacker on the local network could access other local servers.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7