Man-in-the-Middle (MitM) Attacks

2016-12-0605:34:27

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

54.6%

JSON

selenium-download is vulnerable to man-in-the-middle attacks. The library downloads binaries via HTTP, allowing a malicious user to swap out the requested binary with another binary for the system to execute.

CPENameOperatorVersion
selenium-downloadle2.0.6

CPE	Name	Operator	Version
	selenium-download	le	2.0.6

References

github.com/groupon/selenium-download/pull/32

nodesecurity.io/advisories/164

0.002 Low

EPSS

Percentile

54.6%

JSON

Related for VERACODE:3083