Skip to content
OpenAdvisories

Product · HackerOne

selenium-chromedriver node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2016-10624

    selenium-chromedriver Downloads Resources over HTTP

    selenium-chromedriver is a simple utility for downloading the Selenium Webdriver for Google Chrome selenium-chromedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) …

    HackerOne selenium-chromedriver node module selenium-chromedriver npm