CVE-2016-10613

bionode-sra is a Node.js wrapper for SRA Toolkit. bionode-sra downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

Score

CVSS 3.0 5.9 Medium

Status

Modified - support@hackerone.com

Published

2018-06-01

Last modified

2024-09-16

Weaknesses

CWE-310, CWE-311

Affected products

• Bionode-sra (Bionode)
• Bionode-sra Node Module (Hackerone)

References

• https://nodesecurity.io/advisories/211