Lucene search
K

4 matches found

Github Security Blog
Github Security Blog
added 2019/02/18 11:47 p.m.18 views

Downloads Resources over HTTP in webdriver-launcher

Affected versions of webdriver-launcher insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...

9.3CVSS6AI score0.00518EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2019/02/18 11:47 p.m.12 views

GHSA-2VQV-HP3P-FMV8 Downloads Resources over HTTP in webdriver-launcher

Affected versions of webdriver-launcher insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...

9.3CVSS8.1AI score0.00518EPSS
Exploits0References3
CNVD
CNVD
added 2018/06/15 12:0 a.m.1 views

webdriver-launcher remote code execution vulnerability

webdriver-launcher is a tool that enables you to launch your browser using webdriver. A security vulnerability exists in webdriver-launcher that originates when the program downloads binary resources over the HTTP protocol. A remote attacker can exploit the vulnerability by replacing the requeste...

9.3CVSS8.1AI score0.00518EPSS
Exploits0References1
Node.js
Node.js
added 2016/12/01 7:11 p.m.31 views

Downloads Resources over HTTP

Overview Affected versions of webdriver-launcher insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

9.3CVSS5.3AI score0.00518EPSS
Exploits0Affected Software1
Rows per page
Query Builder