Description

igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol.

Remediation

References

https://nodesecurity.io/advisories/116

Related Vulnerabilities

CVE-2018-1336 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core

CVE-2021-43570 Vulnerability in maven package com.starkbank.ellipticcurve:starkbank-ecdsa

CVE-2018-1000613 Vulnerability in maven package org.bouncycastle:bcprov-ext-jdk15on

CVE-2021-21181 Vulnerability in npm package electron

CVE-2022-25354 Vulnerability in npm package set-in

Severity

High

Classification

CWE-254 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Tags

Third Party Advisory