CVE-2016-10680CWE-311

CVE-2016-10680: vulnerability in HackerOne adamvr-geoip-lite node module

Published · Updated

Follow this CVE+ Monitor adamvr-geoip-lite node module+ Monitor adamvr-geoip-lite

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
adamvr-geoip-lite is a light weight native JavaScript implementation of GeoIP API from MaxMind adamvr-geoip-lite downloads geoip resources over HTTP, which leaves it vulnerable to MITM attacks. This impacts the integrity and availability of this geoip data that may alter the decisions made by an application using this data.
Affected products
HackerOne · adamvr-geoip-lite node module