Lucene search
PRIOn knowledge basePRION:CVE-2016-10695HistoryJun 04, 2018 - 7:29 p.m.
Remote code execution
2018-06-0419:29:00
PRIOn knowledge base
www.prio-n.com
1
The npm-test-sqlite3-trunk module provides asynchronous, non-blocking SQLite3 bindings. npm-test-sqlite3-trunk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| npm-test-sqlite3-trunk | le | 4.0.1 |
References
Related
nodejs
nodejs
Downloads Resources over HTTP
2016-12-02 04:58:08
cve
cve
CVE-2016-10695
2018-06-04 19:29:00
nvd
nvd
CVE-2016-10695
2018-06-04 19:29:00
cvelist
cvelist
CVE-2016-10695
2018-04-26 00:00:00
osv
osv
Downloads Resources over HTTP in npm-test-sqlite3-trunk
2020-09-01 16:15:28
CVE-2016-10695
2018-06-04 19:29:00
veracode
veracode
Arbitrary Code Execution Via Man-in-the-Middle (MitM)
2017-01-03 06:57:02
github
github
Downloads Resources over HTTP in npm-test-sqlite3-trunk
2020-09-01 16:15:28