Description

node-browser is a wrapper webdriver by nodejs. node-browser downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

Remediation

References

https://nodesecurity.io/advisories/214

Related Vulnerabilities

CVE-2020-2129 Vulnerability in maven package org.apache.maven.plugins:maven-compiler-plugin

CVE-2019-10313 Vulnerability in maven package org.jenkins-ci.plugins:twitter

CVE-2022-37616 Vulnerability in maven package org.webjars.npm:xmldom__xmldom

CVE-2022-24847 Vulnerability in maven package org.geoserver.community:gs-taskmanager-core

CVE-2016-10535 Vulnerability in npm package csrf-lite

Severity

Critical

Classification

CWE-310 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Third Party Advisory