Man In The Middle (MitM)

2016-12-1907:10:44

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

54.6%

JSON

product-monitor is vulnerable to man-in-the-middle (MitM) attacks. This is because the library downloads JavaScript resources via HTTP, allowing MitM attacks. It may also cause remote code execution (RCE) by swapping out the requested JavaScript with an attacker controlled JavaScript if the attacker is on the network or positioned in between the user and the remote server.

CPENameOperatorVersion
product-monitorle2.2.4

CPE	Name	Operator	Version
	product-monitor	le	2.2.4

References

github.com/connected-web/product-monitor/blob/master/CHANGELOG.md

github.com/connected-web/product-monitor/issues/53

nodesecurity.io/advisories/171

0.002 Low

EPSS

Percentile

54.6%

JSON

Related for VERACODE:3131