Skip to content
OpenAdvisories

Product · HackerOne

macaca-chromedriver node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2016-10586

    Downloads Resources over HTTP in macaca-chromedriver

    macaca-chromedriver is a Node.js wrapper for the selenium chromedriver. macaca-chromedriver before 1.0.29 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out…

    HackerOne macaca-chromedriver node module macaca-chromedriver npm