Description

node-browser is a wrapper webdriver by nodejs. node-browser downloads resources over HTTP, which leaves it vulnerable to MITM attacks.

Remediation

References

https://nodesecurity.io/advisories/214

Related Vulnerabilities

CVE-2021-32691 Vulnerability in npm package data-connector-rock

CVE-2022-21227 Vulnerability in npm package sqlite3

CVE-2020-15256 Vulnerability in maven package org.webjars.npm:object-path

CVE-2018-20676 Vulnerability in maven package org.webjars.bowergithub.twbs:bootstrap-sass

CVE-2020-13961 Vulnerability in npm package strapi

Severity

Critical

Classification

CWE-311 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Third Party Advisory