Skip to content
OpenAdvisories

Product · HackerOne

sauce-connect node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2016-10599

    sauce-connect downloads Resources over HTTP

    sauce-connect is a Node.js wrapper over the SauceLabs SauceConnect.jar program for establishing a secure tunnel for intranet testing. sauce-connect downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause r…

    HackerOne sauce-connect node module sauce-connect npm