Skip to content
OpenAdvisories

Product · HackerOne

macaca-chromedriver-zxa node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2016-10623

    Downloads Resources over HTTP in macaca-chromedriver-zxa

    macaca-chromedriver-zxa is a Node.js wrapper for the selenium chromedriver. macaca-chromedriver-zxa downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the r…

    HackerOne macaca-chromedriver-zxa node module macaca-chromedriver-zxa npm