CVE-2016-10592

Summary

jser-stat is a JSer.info stat library. jser-stat downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

Affected Software

Weaknesses

• CWE-311: Missing Encryption of Sensitive Data (CWE-311)

ADP Enrichment

CVE Program Container

Additional References

• https://nodesecurity.io/advisories/188
• https://github.com/jser/stat-js/blob/master/data/url-mapping.js

References

• https://nodesecurity.io/advisories/188
• https://github.com/jser/stat-js/blob/master/data/url-mapping.js

• ←Previous
• Next→