CVE-2016-10635

broccoli-closure is a Closure compiler plugin for Broccoli. broccoli-closure before 1.3.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary...

CVE-2016-10635

The CVE-2016-10635 entry affects broccoli-closure, a Closure compiler plugin for Broccoli. Versions prior to 1.3.1 download binary resources over HTTP, enabling MITM modification of binaries and potential remote code execution if an attacker is on the network between the user and the server. The ...

CVE-2016-10635: Missing Encryption of Sensitive Data

broccoli-closure is a Closure compiler plugin for Broccoli. broccoli-closure before 1.3.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary...

PT-2018-4813

Name of the Vulnerable Software and Affected Versions broccoli-closure versions prior to 1.3.1 Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. An attacker with a privileged network position could intercep...