CVE-2016-10592

jser-stat is a JSer.info stat library. jser-stat downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

Score

CVSS 3.0 8.1 High

Status

Modified - support@hackerone.com

Published

2018-06-01

Last modified

2024-09-17

Weaknesses

CWE-310, CWE-311

Affected products

• Jser-stat Node Module (Hackerone)
• Jser-stat (Jser-stat Project)

References

• https://github.com/jser/stat-js/blob/master/data/url-mapping.js
• https://nodesecurity.io/advisories/188