CVE-2023-3348
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
The Wrangler command line tool (<[email protected] or <[email protected]) was affected by a directory traversal vulnerability when running a local development server for Pages. This vulnerability enabled an attacker in the same network as the victim to connect to the local development server and access the victim's files present outside of the directory for the development server.
Risk Assessment
This vulnerability poses a risk of unauthorized access to sensitive user files, which could lead to data exposure or modification.
Recommendation
It is recommended to update the Wrangler tool to the latest version to mitigate this vulnerability and restrict access to the local development server to trusted users only.
Original NVD description (English source)
The Wrangler command line tool (<[email protected] or <[email protected]) was affected by a directory traversal vulnerability when running a local development server for Pages (wrangler pages dev command). This vulnerability enabled an attacker in the same network as the victim to connect to the local development server and access the victim's files present outside of the directory for the development server.