Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3152
HistoryDec 20, 2016 - 6:28 a.m.

Man In The Middle (MitM)

2016-12-2006:28:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.003 Low

EPSS

Percentile

68.1%

nw is vulnerable to man-in-the-middle (MitM) attacks. This is because the library downloads zipped resources via HTTP, allowing MitM attacks. It may also cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled zip file if the attacker is on the network or positioned in between the user and the remote server.

CPENameOperatorVersion
nwle0.23.6

0.003 Low

EPSS

Percentile

68.1%