Skip to content
OpenAdvisories

Product · HackerOne

grunt-webdriver-qunit node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2016-10606

    Downloads Resources over HTTP in grunt-webdriver-qunit

    grunt-webdriver-qunit is a grunt plugin to run qunit with webdriver in grunt grunt-webdriver-qunit downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the re…

    HackerOne grunt-webdriver-qunit node module grunt-webdriver-qunit npm