Lucene search
+L
GalenframeworkGalenframework-cli

1 matches found

CVE
CVE
added 2018/05/31 8:0 p.m.68 views

CVE-2016-10560

Galenframework-cli (node wrapper) below 2.3.1 downloads binaries over HTTP, enabling MITM and possible remote code execution if an attacker intercepts the binary. Remediation: upgrade to 2.3.1 or later.

9.3CVSS8.2AI score0.01699EPSS
Save