CVE-2016-10592

Impact

jser-stat is a JSer.info stat library. jser-stat downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/jser/stat-js/blob/master/data/url-mapping.js
• https://nodesecurity.io/advisories/188
• https://github.com/jser/stat-js/blob/master/data/url-mapping.js
• https://nodesecurity.io/advisories/188