Description

sfml downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

Remediation

References

https://nodesecurity.io/advisories/256

Related Vulnerabilities

CVE-2022-25967 Vulnerability in npm package eta

CVE-2019-0191 Vulnerability in maven package org.apache.karaf.kar:org.apache.karaf.kar.core

CVE-2019-0212 Vulnerability in maven package org.apache.hbase:hbase-rest

CVE-2022-45598 Vulnerability in npm package @joplin/renderer

CVE-2022-24772 Vulnerability in npm package node-forge

Severity

Critical

Classification

CWE-310 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Third Party Advisory