Skip to content
OpenAdvisories

Product · HackerOne

selenium-download node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2016-10559

    Downloads Resources over HTTP in selenium-download

    selenium-download downloads the latest versions of the selenium standalone server and the chromedriver. selenium-download before 2.0.7 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code ex…

    HackerOne selenium-download node module selenium-download npm