CVE-2016-10592

CVE-2016-10592

EPSS 0.6%CWE-311

jser-stat is a JSer.info stat library. jser-stat downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

Produtos afetados

HackerOne · jser-stat node module

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/jser/stat-js/blob/master/data/url-mapping.js https://nodesecurity.io/advisories/188