CVE-2016-10563CWE-311

CVE-2016-10563: vulnerability in HackerOne go-ipfs-dep node module

Published · Updated

Follow this CVE+ Monitor go-ipfs-dep node module+ Monitor go-ipfs-dep

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
During the installation process, the go-ipfs-deps module before 0.4.4 insecurely downloads resources over HTTP. This allows for a MITM attack to compromise the integrity of the resources used by this module and could allow for further compromise.
Affected products
HackerOne · go-ipfs-dep node module