Количество 2
Количество 2
CVE-2016-10583
closure-utils is Utilities for Closure Library based projects. closure-utils downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
GHSA-2hpj-g53m-9gj6
closure-util downloads Resources over HTTP
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2016-10583 closure-utils is Utilities for Closure Library based projects. closure-utils downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. | CVSS3: 8.1 | 2% Низкий | больше 7 лет назад | |
GHSA-2hpj-g53m-9gj6 closure-util downloads Resources over HTTP | CVSS3: 8.1 | 2% Низкий | почти 7 лет назад |
Уязвимостей на страницу