Skip to content
OpenAdvisories

Product · HackerOne

windows-iedriver node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2016-10689

    Downloads Resources over HTTP in windows-iedriver

    The windows-iedriver module downloads fixed version of iedriverserver.exe windows-iedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested …

    HackerOne windows-iedriver node module windows-iedriver Windows npm