Логотип exploitDog
bind:CVE-2016-10587
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2016-10587

Количество 2

Количество 2

nvd логотип

CVE-2016-10587

больше 7 лет назад

wasdk is a toolkit for creating WebAssembly modules. wasdk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.

CVSS3: 8.1
EPSS: Низкий
github логотип

GHSA-rh7p-9c79-gpp8

почти 7 лет назад

Downloads Resources over HTTP in wasdk

CVSS3: 8.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2016-10587

wasdk is a toolkit for creating WebAssembly modules. wasdk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.

CVSS3: 8.1
1%
Низкий
больше 7 лет назад
github логотип
GHSA-rh7p-9c79-gpp8

Downloads Resources over HTTP in wasdk

CVSS3: 8.1
1%
Низкий
почти 7 лет назад

Уязвимостей на страницу