CVE-2016-10673CWE-311

CVE-2016-10673: vulnerability in HackerOne ipip-coffee node module

Published · Updated

Follow this CVE+ Monitor ipip-coffee node module+ Monitor ipip-coffee

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.5%
ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an application.
Affected products
HackerOne · ipip-coffee node module