CVE-2016-10578

CVE-2016-10578

Vendor Hackerone

Product unicode node module

Weakness CWE-311 · Missing encryption

Published May 29, 2018

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.

Key dates

02Disclosure timeline

May 29, 2018 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2016-10578 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/311.html

Related vulnerabilities

01Description

02Disclosure timeline

03References

04Related CVE