High severity7.5NVD Advisory· Published Jan 19, 2018· Updated Jun 17, 2026
CVE-2017-14460
CVE-2017-14460
Description
An exploitable overly permissive cross-domain (CORS) whitelist vulnerability exists in JSON-RPC of Parity Ethereum client version 1.7.8. An automatically sent JSON object to JSON-RPC endpoint can trigger this vulnerability. A victim needs to visit a malicious website to trigger this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: =1.7.8
- Talos/Parityv5Range: Parity 1.7.8
Patches
Vulnerability mechanics
References
1- www.talosintelligence.com/vulnerability_reports/TALOS-2017-0508nvdExploitTechnical DescriptionThird Party Advisory
News mentions
0No linked articles in our index yet.