Lucene search
GoogleOSV:CVE-2016-10568HistoryMay 29, 2018 - 8:29 p.m.
CVE-2016-10568
2018-05-2920:29:00
Google
osv.dev
1
geoip-lite-country is a stripped down version of geoip-lite, supporting only country lookup. geoip-lite-country before 1.1.4 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| node-geoip-country | eq | 1_1_0 | |
| node-geoip-country | eq | 1.0.7 | |
| node-geoip-country | eq | 1.0.9 | |
| node-geoip-country | eq | 1.1.1 | |
| node-geoip-country | eq | 1.0.8 |
References
Related
veracode
veracode
Man In The Middle (MitM)
2016-12-19 06:49:52
osv
osv
Downloads Resources over HTTP in geoip-lite-country
2019-02-18 23:54:03
cve
cve
CVE-2016-10568
2018-05-29 20:29:00
nvd
nvd
CVE-2016-10568
2018-05-29 20:29:00
nodejs
nodejs
Downloads Resources over HTTP
2016-11-30 22:46:49
github
github
Downloads Resources over HTTP in geoip-lite-country
2019-02-18 23:54:03
prion
prion
Design/Logic Flaw
2018-05-29 20:29:00
cvelist
cvelist
CVE-2016-10568
2018-04-26 00:00:00