closurecompiler downloads Resources over HTTP

🗓️ 18 Feb 2019 23:19:51Reported by GitHub Advisory DatabaseType

closurecompiler insecure HTTP download ris

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2016-10582	1 Jun 201818:29	–	cve
Prion	Remote code execution	1 Jun 201818:29	–	prion
Node.js	Downloads Resources over HTTP	30 Nov 201621:42	–	nodejs
NVD	CVE-2016-10582	1 Jun 201818:29	–	nvd
Veracode	Man In The Middle (MitM)	20 Dec 201607:09	–	veracode
OSV	closurecompiler downloads Resources over HTTP	18 Feb 201923:51	–	osv
Cvelist	CVE-2016-10582	1 Jun 201818:00	–	cvelist

Vulners

Node

closurecompiler_project closurecompilerRange≤1.6.1

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-10582
github	www.github.com/dcodeIO/ClosureCompiler.js/commit/e59848f5975e5b15279c044daf9cff8ff192bae6
github	www.github.com/advisories/GHSA-hjgp-8ffr-hwwr
npmjs	www.npmjs.com/advisories/169

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Feb 2019 23:51Current

8.1High risk

Vulners AI Score8.1

CVSS29.3

CVSS38.1

EPSS0.00774

CWE-311