CVE-2017-16203

Summary

The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.

Affected Software

VendorProductVersion RangeStatus
HackerOnecoffeescript node module1.0.1affected

Weaknesses

  • CWE-506: Embedded Malicious Code (CWE-506)

ADP Enrichment

CVE Program Container

Additional References

References