Lucene search

CVE-2016-10698

🗓️ 29 May 2018 20:02:29Reported by hackeroneType

Node.js wrapper for MyStem morphology text analyzer vulnerable to MITM attack

Reporter	Title	Published	Views	Family All 7
Prion	Remote code execution	29 May 201820:29	–	prion
OSV	Downloads Resources over HTTP in mystem-fix	27 Jul 201814:34	–	osv
Github Security Blog	Downloads Resources over HTTP in mystem-fix	27 Jul 201814:34	–	github
Veracode	Man-in-the-Middle (MitM)	30 May 201805:09	–	veracode
Cvelist	CVE-2016-10698	29 May 201820:00	–	cvelist
NVD	CVE-2016-10698	29 May 201820:29	–	nvd
Node.js	Downloads Resources over HTTP	2 Dec 201605:04	–	nodejs

Nvd

Node

mystem-fix_project mystem-fixRange≤0.0.5node.js

[
  {
    "product": "mystem-fix node module",
    "vendor": "HackerOne",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]

Source	Link
nodesecurity	www.nodesecurity.io/advisories/301

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 May 2018 20:29Current

8.3High risk

Vulners AI Score8.3

CVSS29.3

CVSS38.1

EPSS0.006