Sending specially crafted HTTP requests and inspector messages to Wranglers dev server could result in any file on the users computer being accessible over the local network. An attacker that could trick any user on the local network into opening a malicious website could also read any file.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wrangler | Cloudflare | 3.9.0 (including) | 3.19.0 (excluding) |