Product · HackerOne

selenium-standalone-painful node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High —

CVE-2016-10679

Downloads Resources over HTTP in selenium-standalone-painful

selenium-standalone-painful installs a start-selenium command line to start a standalone selenium server with chrome-driver. selenium-standalone-painful downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to ca…

HackerOne selenium-standalone-painful node module selenium-standalone-painful npm

May 29, 2018