Lucene search
Veracode Vulnerability DatabaseVERACODE:4540HistoryJul 06, 2017 - 5:14 a.m.
Resources Downloaded Through Insecure Protocol
2017-07-0605:14:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.002 Low
EPSS
Percentile
65.0%
gfe-sass downloads resources through an insecure protocol. The library downloads resources through HTTP, allowing a man-in-the-middle attack to tamper with the content in transit.
References
Related
cvelist
cvelist
CVE-2017-16040
2018-04-26 00:00:00
nodejs
nodejs
Downloads Resources over HTTP
2016-12-02 04:49:32
github
github
gfe-sass downloads Resources over HTTP
2020-09-01 16:12:12
osv
osv
gfe-sass downloads Resources over HTTP
2020-09-01 16:12:12
prion
prion
Remote code execution
2018-06-04 19:29:00
nvd
nvd
CVE-2017-16040
2018-06-04 19:29:02
cve
cve
CVE-2017-16040
2018-06-04 19:29:02