CVE-2017-14460
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2017-14460
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An exploitable overly permissive cross-domain (CORS) whitelist vulnerability exists in JSON-RPC of Parity Ethereum client version 1.7.8. An automatically sent JSON object to JSON-RPC endpoint can trigger this vulnerability. A victim needs to visit a malicious website to trigger this vulnerability.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Parity Ethereum client JSON-RPC 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Parity Ethereum client是Ethereum（应用程序运行平台）的客户端。JSON-RPC是其中的一个以JSON为协议的远程调用服务。 Parity Ethereum client 1.7.8版本中的JSON-RPC存在安全漏洞。攻击者可利用该漏洞向JSON-RPC端点发送JSON对象利用该漏洞获取当前账户、parity设置和网络配置的信息，也可更改账户和parity的配置。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2017-14460
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-14460
Please Login to view more intelligence information
Same Patch Batch · Talos · 2018-01-19 · 11 CVEs total
| CVE-2017-12113 | CPP-Ethereum JSON-RPC 安全漏洞 | |
| CVE-2017-12116 | CPP-Ethereum JSON-RPC 安全漏洞 | |
| CVE-2017-12118 | CPP-Ethereum JSON-RPC 安全漏洞 | |
| CVE-2017-12119 | CPP-Ethereum JSON-RPC 安全漏洞 | |
| CVE-2017-14457 | CPP-Ethereum libevm 信息泄露漏洞 | |
| CVE-2017-12112 | CPP-Ethereum JSON-RPC 安全漏洞 | |
| CVE-2017-12114 | CPP-Ethereum JSON-RPC 安全漏洞 | |
| CVE-2017-12115 | CPP-Ethereum JSON-RPC 安全漏洞 | |
| CVE-2017-12117 | CPP-Ethereum JSON-RPC 安全漏洞 | |
| CVE-2017-12097 | delayed_job_web rails gem 跨站脚本漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2017-14460
No comments yet