webpack-dev-server Host Bypass Leading to Source Path Disclosure (CVE-2021-16388)

Vulnerability Overview Vulnerability Title: Information Disclosure Vulnerability in webpack-dev-server Due to Host Validation Bypass Vulnerability Description: registers an unauthorized endpoint. Its Host validation routine applies a regular expression intended to match the protocol (e.g., or ) in the browser's Origin header, followed by a short-code validation to check the hostname and URL path. An attacker can send a request containing a malformed host (e.g., ) to this endpoint, thereby bypassing the validation and obtaining the HTML response generated by the server endpoint. This response contains the full source code path, revealing sensitive Node.js paths, installed module paths, and internal source code line numbers. Scope of Impact: Affected Versions: and Fixed Versions: and CVSS Score: 5.3 (Medium) Attack Complexity: Low Required Privileges: None User Interaction: None Confidentiality Impact: Low Integrity Impact: None Availability Impact: None Remediation: Upgrade to version or of . Workarounds: None Vulnerability Details: CVE ID: CVE-2021-16388 CWE ID: CWE-209, CWE-118 Reporters: Reporter: matno.pl Mitigation Developer: tshemabaa Analyst: tshemabaa Reporter: tshemabaa Vulnerability Publication Date: 13 hours ago Vulnerability Status: Fixed Vulnerability Impact: Attack Vector: Network Attack Complexity: Low Required Privileges: None User Interaction: None Confidentiality Impact: Low Integrity Impact: None Availability Impact: None Vulnerability Details: CVSS 3.0 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Required Privileges: None - User Interaction: None - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None Vulnerability Details: CVSS 3.0 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Required Privileges: None - User Interaction: None - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None Vulnerability Details: CVSS 3.0 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Required Privileges: None - User Interaction: None - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None Vulnerability Details: CVSS 3.0 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Required Privileges: None - User Interaction: None - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None Vulnerability Details: CVSS 3.0 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Required Privileges: None - User Interaction: None - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None Vulnerability Details: CVSS 3.0 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Required Privileges: None - User Interaction: None - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None Vulnerability Details: CVSS 3.0 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Required Privileges: None - User Interaction: None - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None Vulnerability Details: CVSS 3.0 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Required Privileges: None - User Interaction: None - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None Vulnerability Details: CVSS 3.0 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Required Privileges: None - User Interaction: None - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None Vulnerability Details: CVSS 3.0 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Required Privileges: None - User Interaction: None - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None Vulnerability Details: CVSS 3.0 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Required Privileges: None - User Interaction: None - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None Vulnerability Details: CVSS 3.0 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Required Privileges: None - User Interaction: None - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None Vulnerability Details: CVSS 3.0 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Required Privileges: None - User Interaction: None - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None Vulnerability Details: CVSS 3.0 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Required Privileges: None - User Interaction: None - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None Vulnerability Details: CVSS 3.0 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Required Privileges: None - User Interaction: None - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None Vulnerability Details: CVSS 3.0 Base Metrics: - Attack V

Goal Reached Thanks to every supporter — we hit 100%!

webpack-dev-server Host Bypass Leading to Source Path Disclosure (CVE-2021-16388)

More from this source