Lucene search

CVE-2016-10644

🗓️ 04 Jun 2018 16:00:29Reported by hackeroneType

npm wrapper for installing bleeding edge version of slimerjs, vulnerable to MITM attack

Reporter	Title	Published	Views	Family All 7
Veracode	Man-In-The-Middle (MitM)	5 Jun 201801:59	–	veracode
Node.js	Downloads Resources over HTTP	1 Dec 201618:58	–	nodejs
Cvelist	CVE-2016-10644	4 Jun 201816:00	–	cvelist
OSV	slimerjs-edge downloads Resources over HTTP	15 Aug 201819:25	–	osv
Github Security Blog	slimerjs-edge downloads Resources over HTTP	15 Aug 201819:25	–	github
NVD	CVE-2016-10644	4 Jun 201816:29	–	nvd
Prion	Remote code execution	4 Jun 201816:29	–	prion

Nvd

Node

slimerjs-edge_project slimerjs-edgeMatch-node.js

[
  {
    "product": "slimerjs-edge node module",
    "vendor": "HackerOne",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]

Source	Link
nodesecurity	www.nodesecurity.io/advisories/243

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Jun 2018 16:29Current

8.3High risk

Vulners AI Score8.3

CVSS29.3

CVSS38.1

EPSS0.006