CVE-2017-16041

ikst versions before 1.1.2 download resources over HTTP, which leaves it vulnerable to MITM attacks.

Score

CVSS 3.0 5.9 Medium

Status

Modified - support@hackerone.com

Published

2018-06-04

Last modified

2024-09-17

Weaknesses

CWE-311, CWE-319

Affected products

• Ikst Node Module (Hackerone)
• Ikst (Ikst Project)

References

• https://nodesecurity.io/advisories/249