GHSA-6FVW-7VCH-X489 Downloads Resources over HTTP in selenium-portal

🗓️ 18 Feb 2019 23:44:36Reported by GoogleType

osv🔗 osv.dev👁 16 Views

Affected versions of `selenium-portal` insecurely download an executable over an unencrypted HTTP connection. No patch is currently available for this vulnerability, and the package has not seen an update since 2014. The best mitigation is currently to avoid using this package, using a different package if available. Alternatively, the risk of exploitation can be reduced by ensuring that this package is not installed while connected to a public network

Reporter	Title	Published	Views	Family All 10
CNVD	selenium-portal remote code execution vulnerability	15 Jun 201800:00	–	cnvd
CVE	CVE-2016-10667	4 Jun 201816:00	–	cve
Cvelist	CVE-2016-10667	4 Jun 201816:00	–	cvelist
EUVD	EUVD-2019-0241	7 Oct 202500:30	–	euvd
Github Security Blog	Downloads Resources over HTTP in selenium-portal	18 Feb 201923:44	–	github
Node.js	Downloads Resources over HTTP	1 Dec 201622:14	–	nodejs
NVD	CVE-2016-10667	4 Jun 201816:29	–	nvd
OSV	CVE-2016-10667	4 Jun 201816:29	–	osv
Prion	Remote code execution	4 Jun 201816:29	–	prion
Veracode	Man-in-the-Middle (MitM)	5 Jun 201803:10	–	veracode