← CVE Intelligence

CVE-2017-14460

Talos / Parity PUBLISHED

Description (CNA)

An exploitable overly permissive cross-domain (CORS) whitelist vulnerability exists in JSON-RPC of Parity Ethereum client version 1.7.8. An automatically sent JSON object to JSON-RPC endpoint can trigger this vulnerability. A victim needs to visit a malicious website to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
Talos / Parityaffected Parity 1.7.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.