What is CVE-2018-14731?

CVE-2018-14731 is a high-severity vulnerability in Parceljs Parcel, classified under Information Disclosure. CVSS score: 7.5/10. Published 2018-09-21.

How severe is CVE-2018-14731?

High severity. CVSS v3 base score is 7.5 out of 10.

Information disclosure in Parceljs Parcel

CVE-2018-14731

An issue was discovered in HMRServer.js in Parcel parcel-bundler. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone ca…

Vulnerability class: Information Disclosure

EPSS: 0.023 (81.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Parceljs Parcel
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2018-14731?: CVE-2018-14731 is a high-severity vulnerability in Parceljs Parcel, classified under Information Disclosure. CVSS score: 7.5/10. Published 2018-09-21.
How severe is CVE-2018-14731?: High severity. CVSS v3 base score is 7.5 out of 10.